Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1228182 * bsc#1228690 * bsc#1229079 * bsc#1229104 * bsc#1230361
* bsc#1229079 * bsc#1229104 * bsc#1230361 * bsc#1231497 * bsc#1231568
* bsc#1229079 * bsc#1229104 * bsc#1231497 * bsc#1231568 * bsc#1231759
Update to 3.13.2 Statically build the _datetime module into libpython. This fixes a segfault when importing it from Python 3.13.0 updated to 3.13.1+ while runn…
Rebase to 3.2.4, fix CVE-2024-12797
Prevent overflow when calculating ulog block size (CVE-2025-24528) Support PKCS11 EC client certs in PKINIT kdb5_util: fix DB entry flags on modification Add E…
* bsc#1228165 * bsc#1234290 * bsc#1236705 Cross-References:
Sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_deliver() function. (CVE-2023-2794) Sms decoder stack-based buffe…
In Net::OAuth::Client in the Net::OAuth package before 0.29 for Perl, the default nonce is a 32-bit integer generated from the built-in rand() function, which …
A widespread phishing campaign has been observed leveraging bogus PDF documents hosted on the Webflow content delivery network (CDN) with an aim to steal credi…
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
* bsc#1012628 * bsc#1194869 * bsc#1215199 * bsc#1216813 * bsc#1218470
* bsc#1236705 Cross-References: * CVE-2025-0938
* bsc#1218879 * bsc#1218880 * bsc#1218881 * bsc#1218882 * bsc#1218883
* bsc#1228044 * bsc#1236282 Cross-References: * CVE-2025-0395
USN-6846-2 caused some regression in ansible.
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-24143
USN-7256-1 caused some minor regressions in Ruby
Update to 133.0.6943.53 CVE-2025-0444: Use after free in Skia CVE-2025-0445: Use after free in V8 CVE-2025-0451: Inappropriate implementation in Extensions API
Update the openssl crate to version 0.10.70 and the openssl-sys crate to version 0.9.105. This includes a fix for RUSTSEC-2025-0004 / CVE-2025-0977 and rebuild…
An issue was discovered in TCPDF before 6.8.0. setSVGStyles does not sanitize the SVG font-family attribute. (CVE-2024-56519) An issue was discovered in TCPDF …
