The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A buffer overflow was discovered in GIMP, the GNU Image Manipulation Program, which could result in denial of service or potentially the execution of arbitrary…
libssh could be made to crash.
Brief introduction CVE-2025-8677
Squid could be made to crash if it received specially crafted network traffic.
* bsc#1248631 * bsc#1249207 * bsc#1249208 Cross-References:
An update that solves three vulnerabilities can now be installed.
Several vulnerabilities have been fixed in DCMTK, a collection of libraries and applications implementing large parts of the DICOM standard for medical images.
GIMP, the GNU Image Manipulation Program, is vulnerable to a heap-based buffer overflow when parsing XWD files. This vulnerability allows remote attackers to e…
Geographiclib is a C++ library to solve geodesic problems. A stack buffer overflow occurs when the GeoConvert tool receives a crafted input. The overflow occur…
It was discovered that pure-ftpd, a secure and efficient FTP server, incorrectly verified the maximum file size in the quota mechanism, allowing adversaries to…
Multiple security issues were found in Rack, an interface for developing web applications in Ruby, which could result in denial of service or proxy bypass.
* bsc#1249847 Cross-References: * CVE-2022-50252
An update that solves one vulnerability can now be installed.
* bsc#1250410 Cross-References: * CVE-2025-9230
* bsc#1252282 Cross-References: * CVE-2025-62171
* bsc#1246818 Cross-References: * CVE-2025-7783
Xu Biang discovered a buffer overflow bug in the eap-mschapv2 plugin of strongSwan, an IKE/IPsec suite. The eap-mschapv2 plugin does not correctly check the le…
Several security vulnerabilities have been discovered in Wordpress, a popular content management framework. CVE-2024-6307
* bsc#1251941 Cross-References: * CVE-2025-62291
* bsc#1251958 * bsc#1251959 * bsc#1251960 Cross-References:
An update that solves three vulnerabilities can now be installed.
* bsc#1250908 * bsc#1251940 Cross-References: * CVE-2025-43718
tigervnc security update
Security fix for CVE-2025-58189, CVE-2025-61725