Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Bing Shi reported a flaw in Libtasn1, a library to manage ASN.1 structures. Inefficient processing of input DER data containing a large number of SEQUENCE OF o…
Ruby could be made to crash or run programs as your login if it opened a specially crafted file.
Vim could be made crash.
It's hard to think of a technology more impactful than Artificial Intelligence (AI) . While it's been around for a while, it's only recently broken into the ma…
* bsc#1236619 * jsc#PED-12018 Cross-References: * CVE-2025-24528
* bsc#1233760 Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6
USN-7206-3 caused some regression in rsync.
* bsc#1236596 Cross-References: * CVE-2024-11187
* bsc#1236136 Cross-References: * CVE-2024-13176
* bsc#1236539 Cross-References: * CVE-2024-11704 * CVE-2025-1009
* bsc#1218424 * bsc#1236801 Cross-References: * CVE-2025-22866
* bsc#1229122 * bsc#1236801 Cross-References: * CVE-2025-22866
Update to 20240116.3 Fix potential integer overflow in hash container create/resize
Vulnerabilities were found in sssd, a set of daemons to manage access to remote directories and authentication mechanisms, which could lead to privilege escala…
update to 1.33.0
Add code to deal with sched_setattr() not being exported in glibc 2.41 Address CVE-2024-54159 denial of services via symlink attack
Update to 1.17.3 Fixes CVE-2024-0134 or GHSA-7jm9-xpwx-v999 Fixes CVE-2024-0135 or GHSA-9v84-cc9j-pxr6, CVE-2024-0136 or GHSA- vcfp-63cx-4h59, and CVE-2024-013…
New ASPA support is now always compiled in and available if enable-aspa is set. The aspa Cargo feature has been removed. (#990) If merging mutliple ASPA object…
Update to 3.13.2 Statically build the _datetime module into libpython. This fixes a segfault when importing it from Python 3.13.0 updated to 3.13.1+ while runn…
A flaw was discovered in ark, an archive utility for the KDE platform. Ark extracted archives with absolute paths to the corresponding location on the user's f…
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
Updated to latest upstream (135.0)
Update to 0.8.4
When an input DER data contains a large number of SEQUENCE OF or SET OF elements, decoding the data and searching a specific element in it take quadratic time …
