Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that solves two vulnerabilities and has three security fixes can now be installed.
An update that solves two vulnerabilities and has two security fixes can now be installed.
* bsc#1236217 * bsc#1245878 * bsc#1254430 * bsc#1254431
tomcat security update
Unbundle plutovg from lunasvg, this avoids shipping a duplicate library with conflicting files. Update lunasvg to consume the plutovg version already available…
Update to 4.3.7, enable glib event loop
Several security issues were fixed in Netty.
* bsc#1244325 * bsc#1251827 Cross-References: * CVE-2025-11561
* bsc#1242882 * bsc#1245778 * bsc#1248672 * bsc#1249537
* bsc#1242882 * bsc#1245778 * bsc#1248672 * bsc#1249537
* bsc#1242882 * bsc#1248672 * bsc#1249537 Cross-References:
* bsc#1242882 * bsc#1248672 * bsc#1249537 Cross-References:
* bsc#1242882 * bsc#1248672 * bsc#1249537 Cross-References:
libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications. CVE-2025-4476
An update that solves one vulnerability can now be installed.
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-13947 Janet Black discovered that a website may be able to exfiltrate …
* bsc#1250496 Cross-References: * CVE-2025-10921
python-apt could be made to crash if it opened a specially crafted file.
* bsc#1254132 Cross-References: * CVE-2025-9820
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves two vulnerabilities can now be installed.
* bsc#1250497 Cross-References: * CVE-2025-10922
* bsc#1253332 * bsc#1253333 Cross-References: * CVE-2025-12817
