Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Security fix for CVE-2025-8194
* bsc#1244270 * bsc#1244272 * bsc#1244273 * bsc#1244279 * bsc#1244336
Several security issues were fixed in WebKitGTK.
* bsc#1240414 Cross-References: * CVE-2025-31115
* bsc#1242666 * bsc#1243428 Cross-References: * CVE-2025-3416
Two vunlerabilities were found in libxslt, the XSLT 1.0 processing library, which may lead to information disclosure and DoS attack. CVE-2023-40403
Update to 1.26.3.
Update to 1.26.3.
Update uv to version 0.8.8. Update the h2 crate to version 0.4.12. The builds in this update also address CVE-2025-54368.
* bsc#1206051 * bsc#1221829 * bsc#1229334 * bsc#1234863 * bsc#1236104
* bsc#1241865 Cross-References: * CVE-2025-22872
* bsc#1122321 Cross-References: * CVE-2019-6462
Rajesh Pangare discovered two vulnerabilities in aide, an advanced intrusion detection system. A local attacker can take advantage of these flaws to hide the a…
Several security issues were fixed in Request Tracker.
* bsc#1247590 Cross-References: * CVE-2025-50420
* bsc#1243747 Cross-References: * CVE-2025-48057
Update to 1.135.2 Update to 1.135.0
* bsc#1245309 * bsc#1245310 * bsc#1245311 Cross-References:
Updated to 139.0.7258.66 * CVE-2025-8576: Use after free in Extensions * CVE-2025-8578: Use after free in Cast * CVE-2025-8579: Inappropriate implementation in…
Backport fix for CVE-2025-8194.
upgrade to 1.19.12 Mitigating remote code execution vulnerabilities using systemd sandboxing features.
* bsc#1221107 Cross-References: * CVE-2024-2236
* bsc#1246318 * bsc#1246388 Cross-References: * CVE-2025-52520
Updated perl to version 5.40.3 https://metacpan.org/release/SHAY/perl-5.40.3/view/pod/perldelta.pod
