Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Upstream kernel version 6.6.79 fixes bugs and vulnerabilities. The kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new ker…
Vanilla upstream kernel version 6.6.79 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links. References: - https://bugs.mage…
A heap-based buffer overflow vulnerability in iniparser_dumpsection_ini() in iniparser allows an attacker to read out-of-bounds memory. (CVE-2025-0633) Referen…
Update gnutls to the latest upstream release, including a fix for CVE-2024-12243.
Includes CVE fixes.
Rebase to 3.2.4
* bsc#1236783 Cross-References: * CVE-2024-53104
A command injection flaw was found which could allow a remote, unauthenticated attacker to execute arbitrary shell commands by tricking users into visiting a s…
A heap use-after-free was found in str_to_reg() in Vim
Overflow when calculating ulog block size. (CVE-2025-24528) References: - https://bugs.mageia.org/show_bug.cgi?id=34040 - https://lists.fedoraproject.org/archi…
The system could be made to crash or run programs as an administrator.
* bsc#1237058 * bsc#1237062 Cross-References: * CVE-2025-24031
* bsc#1227320 * bsc#1227371 * bsc#1228585 * bsc#1236783
Arbitrary file include in Carbon::setLocale has been fixed in Carbon, a PHP API extension for DateTime. For Debian 11 bullseye, this problem has been fixed in …
Node.js a JavaScript runtime environment was affected by a vulnerability. A memory leak could occur when a remote peer abruptly closes the socket without sendi…
* bsc#1227320 * bsc#1227371 * bsc#1228585 * bsc#1236783
* bsc#1236783 Cross-References: * CVE-2024-53104
* bsc#1227320 * bsc#1227371 * bsc#1228585 * bsc#1236783
* bsc#1236783 Cross-References: * CVE-2024-53104
* bsc#1227371 * bsc#1228585 * bsc#1236783 Cross-References:
libcap2 would allow unintended capabilities.
iniparser could be made to crash if it opened a specially crafted file.
* bsc#1237058 * bsc#1237062 Cross-References: * CVE-2025-24031
* bsc#1237058 * bsc#1237062 Cross-References: * CVE-2025-24031
