Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Twisted.web has disordered HTTP pipeline response. (CVE-2023-46137) Twisted.web has disordered HTTP pipeline response. (CVE-2024-41671) HTML injection in HTTP …
Waitress has a request processing race condition in HTTP pipelining with an invalid first request. (CVE-2024-49768) Waitress has a denial of service leading to…
Update to 133.0.6943.53 CVE-2025-0444: Use after free in Skia CVE-2025-0445: Use after free in V8 CVE-2025-0451: Inappropriate implementation in Extensions API
* bsc#1236705 Cross-References: * CVE-2025-0938
One vulnerability was discovered in BIND, a DNS server implementation, which may result in denial of service. It is possible to construct a zone such that some…
* jsc#PED-11136 Cross-References: * CVE-2022-47930 * CVE-2024-10846
* bsc#1236136 Cross-References: * CVE-2024-13176
* bsc#1228165 * bsc#1236705 Cross-References: * CVE-2025-0938
* bsc#1227056 * bsc#1236483 Cross-References: * CVE-2023-45288
* bsc#1230998 Cross-References: * CVE-2024-45016
A vulnerability has been discovered in rust-openssl, a set of OpenSSL bindings for the Rust programming language. In affected versions ssl::select_next_proto c…
Bing Shi reported a flaw in Libtasn1, a library to manage ASN.1 structures. Inefficient processing of input DER data containing a large number of SEQUENCE OF o…
* bsc#1236619 * jsc#PED-12018 Cross-References: * CVE-2025-24528
* bsc#1236596 Cross-References: * CVE-2024-11187
* bsc#1236136 Cross-References: * CVE-2024-13176
* bsc#1236539 Cross-References: * CVE-2024-11704 * CVE-2025-1009
* bsc#1218424 * bsc#1236801 Cross-References: * CVE-2025-22866
* bsc#1229122 * bsc#1236801 Cross-References: * CVE-2025-22866
Vulnerabilities were found in sssd, a set of daemons to manage access to remote directories and authentication mechanisms, which could lead to privilege escala…
Add code to deal with sched_setattr() not being exported in glibc 2.41 Address CVE-2024-54159 denial of services via symlink attack
Update to 1.17.3 Fixes CVE-2024-0134 or GHSA-7jm9-xpwx-v999 Fixes CVE-2024-0135 or GHSA-9v84-cc9j-pxr6, CVE-2024-0136 or GHSA- vcfp-63cx-4h59, and CVE-2024-013…
A flaw was discovered in ark, an archive utility for the KDE platform. Ark extracted archives with absolute paths to the corresponding location on the user's f…
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
Update the openssl crate to version 0.10.70 and the openssl-sys crate to version 0.9.105. This includes a fix for RUSTSEC-2025-0004 / CVE-2025-0977 and rebuild…
