Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Ghostscript could be made to crash, run programs, or read files if it opened a specially crafted file.
Several security issues were fixed in micropython.
The following vulnerability has been discovered in the gorilla/csrf package for Go: Prior to 1.7.3, gorilla/csrf did not validate the Origin header against an …
Multiple vulnerabilties were discovered in u-boot, a boot loader for embedded systems.
Multiple vulnerabilities were discovered in nagvis, a visualization addon for Nagios or Icinga. CVE-2021-33178
Backport proposed fix for CVE-2025-31344 from OpenMandriva.
Update to latest upstream (138.0)
Update to 128.9.2 https://www.thunderbird.net/en-US/thunderbird/128.9.0esr/releasenotes/ https://www.thunderbird.net/en-US/thunderbird/128.9.1esr/releasenotes/…
Multiple vulnerabilities have been discovered in Request Tracker, an extensible trouble-ticket tracking system, which could result in information disclosure, c…
Multiple vulnerabilities have been discovered in Request Tracker, an extensible trouble-ticket tracking system, which could result in information disclosure, c…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or a bypass of s…
Multiple vulnerabilities have been discovered in Request Tracker, an extensible trouble-ticket tracking system, which could result in information disclosure, c…
* bsc#1227753 * bsc#1233294 * bsc#1235431 * bsc#1240840
A heap-based buffer overflow was discovered in vips, an image processing system, which could lead to denial of service when processing specially crafted TIFF i…
Multiple vulnerabilities were found in fig2dev, a utility for converting XFig figure files, which could lead to code execution or denial of service upon specia…
Multiple security issues were discovered in QEMU, a fast processor emulator, which could result in denial of service or information leak. CVE-2023-1544
Two issues have been found in libxml2, the GNOME XML library. Thy are related to an out-of-bounds memory access in the Python API and a heap-buffer-overflow in…
An issue has been found in expat, an XML parsing C library. The issue is related to a crash within XML_ResumeParser() because XML_StopParser() can stop/suspend…
* bsc#1241708 Cross-References: * CVE-2025-21605
* bsc#1241708 Cross-References: * CVE-2025-21605
H2O could be made to crash if it received specially crafted network traffic.
PostgreSQL could be made to execute arbitrary code if it received specially crafted input.
* bsc#1233294 * bsc#1235431 Cross-References: * CVE-2024-50205
* bsc#1239909 Cross-References: * CVE-2025-2588
