The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Changes with nginx 1.26.3 05 Feb 2025 *) Security: insufficient check in virtual servers handling with TLSv1.3 SNI allowed to reuse SSL sessions in a different…
Changes with nginx 1.26.3 05 Feb 2025 *) Security: insufficient check in virtual servers handling with TLSv1.3 SNI allowed to reuse SSL sessions in a different…
Changes with nginx 1.26.3 05 Feb 2025 *) Security: insufficient check in virtual servers handling with TLSv1.3 SNI allowed to reuse SSL sessions in a different…
Several security issues were fixed in Apache ActiveMQ.
Important: nodejs:20 security update
A security issue was discovered in the PostgreSQL database system. Under certain usage patterns, improper neutralization of quoting syntax could make it possib…
A security issue exists in Ark where a maliciously crafted archive containing file paths beginning with "/" allows files to be extracted to locations outside t…
Several security issues were fixed in digiKam.
Security fix for CVE-2025-0938
Security fix for CVE-2025-0938
Security fix for CVE-2025-0938
Tornado has an HTTP cookie parsing DoS vulnerability. (CVE-2024-52804) References: - https://bugs.mageia.org/show_bug.cgi?id=33816 - https://lists.opensuse.org…
Security fix for GHSA-f42g-r5jj-qh4j
Update to 9.16.33 (#2342784) Security Fixes: DNS-over-HTTPS flooding fixes. (CVE-2024-12705) Limit additional section processing for large RDATA sets. (CVE-202…
Update to 9.16.33 (#2342784) Security Fixes: DNS-over-HTTPS flooding fixes. (CVE-2024-12705) Limit additional section processing for large RDATA sets. (CVE-202…
Several security issues were fixed in OpenSSL.
Multiple security vulnerabilities have been discovered in Cacti, a web interface for graphing of monitoring systems, which could result in cross-site scripting…
Several security issues were fixed in Firefox.
Several security issues were fixed in the Linux kernel.
Zimbra has released software updates to address critical security flaws in its Collaboration software that, if successfully exploited, could result in informat…
Several security issues were fixed in OpenRefine.
New openssl packages are available for Slackware 15.0 and -current to fix a security issue.
Security fix for CVE-2023-52892, CVE-2024-27354
xrdp allows an infinite number of login attempts. (CVE-2024-39917) References: - https://bugs.mageia.org/show_bug.cgi?id=33985 - https://lists.opensuse.org/arc…