The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1230998 Cross-References: * CVE-2024-45016
A vulnerability has been discovered in rust-openssl, a set of OpenSSL bindings for the Rust programming language. In affected versions ssl::select_next_proto c…
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Bing Shi reported a flaw in Libtasn1, a library to manage ASN.1 structures. Inefficient processing of input DER data containing a large number of SEQUENCE OF o…
Ruby could be made to crash or run programs as your login if it opened a specially crafted file.
Vim could be made crash.
It's hard to think of a technology more impactful than Artificial Intelligence (AI) . While it's been around for a while, it's only recently broken into the ma…
* bsc#1236619 * jsc#PED-12018 Cross-References: * CVE-2025-24528
* bsc#1233760 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6
USN-7206-3 caused some regression in rsync.
* bsc#1236596 Cross-References: * CVE-2024-11187
* bsc#1236136 Cross-References: * CVE-2024-13176
* bsc#1236539 Cross-References: * CVE-2024-11704 * CVE-2025-1009
* bsc#1218424 * bsc#1236801 Cross-References: * CVE-2025-22866
* bsc#1229122 * bsc#1236801 Cross-References: * CVE-2025-22866
Update to 20240116.3 Fix potential integer overflow in hash container create/resize
Vulnerabilities were found in sssd, a set of daemons to manage access to remote directories and authentication mechanisms, which could lead to privilege escala…
update to 1.33.0
Add code to deal with sched_setattr() not being exported in glibc 2.41 Address CVE-2024-54159 denial of services via symlink attack
Update to 1.17.3 Fixes CVE-2024-0134 or GHSA-7jm9-xpwx-v999 Fixes CVE-2024-0135 or GHSA-9v84-cc9j-pxr6, CVE-2024-0136 or GHSA- vcfp-63cx-4h59, and CVE-2024-013…
New ASPA support is now always compiled in and available if enable-aspa is set. The aspa Cargo feature has been removed. (#990) If merging mutliple ASPA object…
Update to 3.13.2 Statically build the _datetime module into libpython. This fixes a segfault when importing it from Python 3.13.0 updated to 3.13.1+ while runn…
A flaw was discovered in ark, an archive utility for the KDE platform. Ark extracted archives with absolute paths to the corresponding location on the user's f…