Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1227320 * bsc#1227371 * bsc#1228585 * bsc#1236783
* bsc#1237093 Cross-References: * CVE-2025-1094
* bsc#1236783 Cross-References: * CVE-2024-53104
* bsc#1227320 * bsc#1228585 * bsc#1236783 Cross-References:
* bsc#1227320 * bsc#1227700 * bsc#1236783 Cross-References:
Fix missing error codes set and invalid error code checks in OpenSSH. It prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS is on (CVE-2…
Update to 133.0.6943.126 CVE-2025-0999: Heap buffer overflow in V8 CVE-2025-1426: Heap buffer overflow in GPU CVE-2025-1006: Use after free in Network
Multiple vulnerabilities have been discovered in fort-validator, a RPKI validator and RTR server. CVE-2024-45234
MIT krb5 a popular implementation of Kerberos 5 protocol was affected by a vulnerability. An authenticated attacker can cause kadmind to write beyond
update to 1.33.2 fix CVE-2025-24898
update to 1.33.2 fix CVE-2025-24898
Multiple vulnerabilities have been found in libxml2, a library providing support to read, modify and write XML and HTML files. These vulnerabilities could pote…
Update to 133.0.6943.126 CVE-2025-0999: Heap buffer overflow in V8 CVE-2025-1426: Heap buffer overflow in GPU CVE-2025-1006: Use after free in Network
* bsc#1236946 Cross-References: * CVE-2024-27856 * CVE-2024-54543
* bsc#1236560 Cross-References: * CVE-2024-45339
* bsc#1237091 Cross-References: * CVE-2025-1244
* bsc#1234597 * bsc#1235573 Cross-References: * CVE-2024-45337
* bsc#1234482 * bsc#1235318 Cross-References: * CVE-2024-45337
An update that fixes three vulnerabilities is now available.
A high-severity security flaw impacting the Craft content management system (CMS) has been added by the U.S. Cybersecurity and Infrastructure Security Agency (…
An update that fixes three vulnerabilities is now available.
The following vulnerabilities have been discovered in the package mosquitto, MQTT message broker.
Update gnutls to the latest upstream release, including a fix for CVE-2024-12243.
* bsc#1237091 Cross-References: * CVE-2025-1244
