Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Multiple vulnerabilities have been discovered in QtWebEngine, the worst of which could lead to arbitrary code execution.
A vulnerability has been discovered in Qt, where a buffer overflow can lead to denial of service.
Multiple vulnerabilities have been discovered in libgsf, the worst of which can lead to arbitrary code execution.
Multiple vulnerabilities have been discovered in GPL Ghostscript, the worst of which could lead to arbitrary code execution.
A vulnerability has been discovered in libuv, where hostname truncation can lead to attacker-controlled lookups.
Update to 2.46.5
Latest stable release from upstream. Changelog: https://github.com/icculus/SDL_sound/releases/tag/v2.0.4 . NOTE: dr_libs are unbundled. Fixes: CVE-2023-45676: …
Update to 2.46.5
Latest stable release from upstream. Changelog: https://github.com/icculus/SDL_sound/releases/tag/v2.0.4 . NOTE: dr_libs are unbundled. Fixes: CVE-2023-45676: …
Lot of CVEs were fixed by upstream since our current version; please see the links. References: - https://bugs.mageia.org/show_bug.cgi?id=33609
BlueZ could be made to run programs as an administrator if it connected to a malicious Bluetooth device.
CVE-2024-53263 When Git LFS requests credentials from Git for a remote host, it passes portions of the host's URL to the `git-credential(1)` command
An update that fixes one vulnerability is now available.
Heap buffer overflow in rsync due to improper checksum length handling. (CVE-2024-12084) Info leak via uninitialized stack contents. (CVE-2024-12085) Rsync ser…
It was discovered that the JSON RPC interface of the server componenent of Snapcast, a multi-room client-server audio player, allowed the execution of arbitrar…
Vim could be made to crash or run programs if it received specially crafted input.
* bsc#1233517 * bsc#1235961 Cross-References: * CVE-2025-23013
* bsc#1170891 * bsc#1173139 * bsc#1185010 * bsc#1190358 * bsc#1190428
* bsc#1215304 * bsc#1220927 * bsc#1220937 * bsc#1230697 * bsc#1232436
* bsc#1192020 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6
* bsc#1224168 * bsc#1224170 * bsc#1224171 * bsc#1224172 * bsc#1224173
* bsc#1233517 * bsc#1235961 Cross-References: * CVE-2025-23013
It was discovered that there was a potential command-injection vulnerability was discovered in ucf, a tool to preserve user changes to config files.
New version 3.4.1, a couple of fixes for the 3.4.0 release. New version 3.4.0. Contains fixes for CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-1208…
