Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1233517 * bsc#1235961 Cross-References: * CVE-2025-23013
It was discovered that there was a potential command-injection vulnerability was discovered in ucf, a tool to preserve user changes to config files.
New version 3.4.1, a couple of fixes for the 3.4.0 release. New version 3.4.0. Contains fixes for CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-1208…
Important: thunderbird security update
Important: raptor2 security update
Important: rsync security update
* bsc#1235856 Cross-References: * CVE-2024-56374
* bsc#1220145 * bsc#1221302 * bsc#1222882 * bsc#1223059 * bsc#1223363
USN-7206-1 caused some regression in rsync.
The GIMP DDS Plugin could be made to crash or run programs as your login if it opened a specially crafted file.
Apache Commons BCEL could be made to crash or run programs if it received specially crafted network traffic.
libxml2 could be made to expose sensitive information over the network.
HarfBuzz could be made to crash or run programs as your login if it opened a specially crafted file.
poppler could be made to crash or expose sensitive information if it opened a specially crafted file.
Several security issues were fixed in .NET.
Audacity could expose sensitive information.
Several security issues were fixed in Python 2.7.
* bsc#1228693 Cross-References: * CVE-2024-40779
* bsc#1232637 * bsc#1233712 Cross-References: * CVE-2022-48956
* bsc#1210619 * bsc#1223363 * bsc#1223683 * bsc#1225013 * bsc#1225202
New version 3.4.0. Contains fixes for CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087, CVE-2024-12088, CVE-2024-12747.
Fix bookmarks restoring from file. Update to 2.53.20
Fix bookmarks restoring from file. Update to 2.53.20
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
