Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1236250 * bsc#1236251 * bsc#1236258 Cross-References:
* bsc#1135481 * bsc#1170891 * bsc#1171420 * bsc#1173139 * bsc#1175543
* bsc#1215304 * bsc#1220927 * bsc#1220937 * bsc#1230697 * bsc#1232436
* bsc#1170891 * bsc#1173139 * bsc#1185010 * bsc#1189998 * bsc#1190358
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday placed a now-patched security flaw impacting the popular jQuery JavaScript library…
Update to latest version Fix CVE-2024-53263
pam-u2f 1.3.1 includes a fix to resolve CVE-2025-23013 (Partial Authentication Bypass). CVSS score 7.3. 1.3.2 is a fix for a regression that could impact exist…
Update to latest version Fix CVE-2024-53263
PCL could be made to crash if it received specially crafted input.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
net/http: sensitive headers incorrectly sent after cross-domain redirect, (CVE-2024-45336). crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints…
* bsc#1219437 * bsc#1234089 Cross-References: * CVE-2024-2365
It was discovered that there was potential Denial of Service (DoS) vulnerability in Django, the Python-based web development framework. The lack of upper-bound…
Cacti could be made to crash or run programs if it received specially crafted network traffic.
An update that fixes one vulnerability is now available.
With the recent release of Wine 10.0 , we now have an updated and powerful tool for running Windows applications on our Linux systems. This new version feature…
OpenJPEG could be made to crash or run programs if it opened a specially crafted file.
Django could be made to cause a denial of service if it received a specially crafted IPv6 string.
In FRR, the internet routing protocol suite software, all routes are re-validated if the total size of an update received via RTR exceeds the internal socket's…
Multiple vulnerabilities have been discovered in PHP, the worst of which could lead to arbitrary code execution.
Multiple vulnerabilities have been discovered in Mozilla Firefox, the worst of which can lead to arbitrary code execution.
Multiple vulnerabilities have been discovered in QtWebEngine, the worst of which could lead to arbitrary code execution.
A vulnerability has been discovered in Qt, where a buffer overflow can lead to denial of service.
