Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
phpMyAdmin 5.2.2 is released Welcome to the release of phpMyAdmin version 5.2.2, the "I should have released this sooner" release. This is primarily a bugfix r…
An update that fixes 6 vulnerabilities is now available.
Two security issues were discovered in Redis, a persistent key-value database, which could result in the execution of arbitrary code or denial of service.
An update that fixes one vulnerability is now available.
* jsc#PED-11136 Cross-References: * CVE-2024-11218 * CVE-2024-36402
* bsc#1236518 Cross-References: * CVE-2023-45288
* bsc#1228770 Cross-References: * CVE-2013-4235
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
Tomcat could be made to run programs if it received specially crafted network traffic.
Several security issues were fixed in jinja2.
VLC could be made to crash or run programs if it received specially crafted network traffic.
Several vulnerabilities were discovered in BIND, a DNS server implementation, which may result in denial of service. For the stable distribution (bookworm), th…
Matthias Gerstner reported that pam-u2f, a PAM module which allows to use U2F (Universal 2nd Factor) devices in the PAM authentication stack, does not properly…
* bsc#1012628 * bsc#1194869 * bsc#1214954 * bsc#1215199 * bsc#1216813
* bsc#1209401 * bsc#1214399 * bsc#1225777 * bsc#1234745 * jsc#PED-11978
* bsc#1234705 Cross-References: * CVE-2024-53580
Several security issues were fixed in PHP.
A security vulnerability has been discovered in simgear, a collection of libraries for constructing simulation and visualization applications such as FlightGea…
* bsc#1235575 Cross-References: * CVE-2025-21613
* bsc#1235147 Cross-References: * CVE-2024-5594
* bsc#1236278 Cross-References: * CVE-2025-21502
fix VW_VERSION in compiled code, patch security issues
Includes security fixes to the crypto/x509 and net/http packages
This is the January 2025 security and bugfix release for .NET 9.0. It updates the SDK to version 9.0.102 and Runtime to version 9.0.1. Release Notes: https://g…
