Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1236705 Cross-References: * CVE-2025-0938
One vulnerability was discovered in BIND, a DNS server implementation, which may result in denial of service. It is possible to construct a zone such that some…
Multiple security vulnerabilities have been discovered in Cacti, a web interface for graphing of monitoring systems, which could result in cross-site scripting…
* jsc#PED-11136 Cross-References: * CVE-2022-47930 * CVE-2024-10846
* bsc#1236136 Cross-References: * CVE-2024-13176
* bsc#1228165 * bsc#1236705 Cross-References: * CVE-2025-0938
* bsc#1227056 * bsc#1236483 Cross-References: * CVE-2023-45288
* bsc#1230998 Cross-References: * CVE-2024-45016
A vulnerability has been discovered in rust-openssl, a set of OpenSSL bindings for the Rust programming language. In affected versions ssl::select_next_proto c…
Bing Shi reported a flaw in Libtasn1, a library to manage ASN.1 structures. Inefficient processing of input DER data containing a large number of SEQUENCE OF o…
* bsc#1236619 * jsc#PED-12018 Cross-References: * CVE-2025-24528
* bsc#1236596 Cross-References: * CVE-2024-11187
* bsc#1236136 Cross-References: * CVE-2024-13176
* bsc#1236539 Cross-References: * CVE-2024-11704 * CVE-2025-1009
* bsc#1218424 * bsc#1236801 Cross-References: * CVE-2025-22866
* bsc#1229122 * bsc#1236801 Cross-References: * CVE-2025-22866
Vulnerabilities were found in sssd, a set of daemons to manage access to remote directories and authentication mechanisms, which could lead to privilege escala…
Security fix for CVE-2023-52892, CVE-2024-27354
Add code to deal with sched_setattr() not being exported in glibc 2.41 Address CVE-2024-54159 denial of services via symlink attack
Update to 1.17.3 Fixes CVE-2024-0134 or GHSA-7jm9-xpwx-v999 Fixes CVE-2024-0135 or GHSA-9v84-cc9j-pxr6, CVE-2024-0136 or GHSA- vcfp-63cx-4h59, and CVE-2024-013…
A flaw was discovered in ark, an archive utility for the KDE platform. Ark extracted archives with absolute paths to the corresponding location on the user's f…
Update the openssl crate to version 0.10.70 and the openssl-sys crate to version 0.9.105. This includes a fix for RUSTSEC-2025-0004 / CVE-2025-0977 and rebuild…
Update the openssl crate to version 0.10.70 and the openssl-sys crate to version 0.9.105. This includes a fix for RUSTSEC-2025-0004 / CVE-2025-0977 and rebuild…
* bsc#1236705 Cross-References: * CVE-2025-0938
