Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
January CPU 2025
January CPU 2025
January CPU 2025
An issue was discovered in Django 4.2 before 4.2.14 and 5.0 before 5.0.7. urlize and urlizetrunc were subject to a potential denial of service attack via certa…
Segmentation fault in win_line() in Vim
Use after free in DevTools. (CVE-2025-0762) References: - https://bugs.mageia.org/show_bug.cgi?id=33974 - https://chromereleases.googleblog.com/2025/01/stable-…
Many records in the additional section cause CPU exhaustion. (CVE-2024-11187) DNS-over-HTTPS implementation suffers from multiple issues under heavy query load…
As the cybersecurity landscape continues to evolve, proactive vulnerability management has become a critical priority for managed service providers (MSPs) and …
OpenJDK 23 could be made to expose sensitive information over the network.
OpenJDK 21 could be made to expose sensitive information over the network.
OpenJDK 17 could be made to expose sensitive information over the network.
OpenJDK 11 could be made to expose sensitive information over the network.
USN-7096-1 caused some minor regressions in OpenJDK 8.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, cit…
Rebuilt against golang-x-net 0.33.0 for CVE-2024-45338
This release contains a number of small improvements and bugfixes, including mitigations for the LOW severity vulnerability CVE-2025-24356. Bugfixes Add mitiga…
Update the OVN sources to upstream release v24.09.2
Path traversal leading to arbitrary .ttf file write. (CVE-2024-12425) URL fetching can be used to exfiltrate arbitrary INI file values and environment variable…
* bsc#1236136 Cross-References: * CVE-2024-13176
* bsc#1236518 Cross-References: * CVE-2023-45288
* bsc#1236460 Cross-References: * CVE-2022-49043
Updated to 132.0.6834.159 * Medium CVE-2025-0762: Use after free in DevTools
Rebuilt against golang-x-net 0.33.0 for CVE-2024-45338
This release contains a number of small improvements and bugfixes, including mitigations for the LOW severity vulnerability CVE-2025-24356. Bugfixes Add mitiga…
