Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
New xorg-server packages are available for Slackware 15.0 and -current to fix security issues.
The updated packages fix security vulnerabilities: Use-after-free in xmlSchemaIDCFillNodeTables. (CVE-2024-56171) Stack-buffer-overflow in xmlSnprintfElements.…
Bing Shi discovered that GnuTLS, a portable library which implements the Transport Layer Security and Datagram Transport Layer Security protocols, had ineffici…
An update that fixes three vulnerabilities is now available.
New ark packages are available for Slackware 15.0 and -current to fix a security issue.
An update that fixes three vulnerabilities is now available.
New libxml2 packages are available for Slackware 15.0 and -current to fix security issues.
Multiple vulnerabilities have been found in OpenSSH, the worst of which could allow a remote attacker to gain unauthorized access.
New openssh packages are available for Slackware 15.0 and -current to fix security issues.
An update that solves 58 vulnerabilities and has 33 fixes is now available.
Cryptography vulnerable to NULL-dereference when loading PKCS7 certificates. (CVE-2023-49083) Python-cryptography: bleichenbacher timing oracle attack against …
Latest upstream release. It adds support for tiles and fixes reading images generated by iOS 18+. See https://github.com/strukturag/libheif/releases for more d…
A buffer overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the ff_bwdif_filter_intra_c function in th…
PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation. (CVE-2025-1094) References: - https://bugs.mageia.org/show_bug…
A security issue was discovered in the PostgreSQL database system. Under certain usage patterns, improper neutralization of quoting syntax could make it possib…
A security issue exists in Ark where a maliciously crafted archive containing file paths beginning with "/" allows files to be extracted to locations outside t…
Recently, the Cybersecurity and Infrastructure Security Agency (CISA) issued a dire warning regarding an out-of-bounds write vulnerability in the Linux kernel …
Remote Code Execution in pypa/setuptools. (CVE-2024-6345) References: - https://bugs.mageia.org/show_bug.cgi?id=33536 - https://lists.suse.com/pipermail/sle-up…
Despite the fix being available, the delays in patching devices allowed the threat actors to…CISA Warns Of Actively Exploited Vulnerability In Microsoft Outloo…
Bing Shi reported a flaw in Libtasn1, a library to manage ASN.1 structures. Inefficient processing of input DER data containing a large number of SEQUENCE OF o…
Update to 20240116.3 Fix potential integer overflow in hash container create/resize
New openssl packages are available for Slackware 15.0 and -current to fix a security issue.
New ASPA support is now always compiled in and available if enable-aspa is set. The aspa Cargo feature has been removed. (#990) If merging mutliple ASPA object…
When an input DER data contains a large number of SEQUENCE OF or SET OF elements, decoding the data and searching a specific element in it take quadratic time …
