Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
Fix CVE-2025-5455 - QtCore Assertion Failure Denial of Service
Update to xwayland 24.1.9, CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231
Update to upstream 2.4.3, including fixes for CVE-2025-62513 and CVE-2025-62705.
Rebuild for CVE-2025-47906. https://pkg.go.dev/vuln/GO-2025-3956
Fix CVE-2025-5455 - QtCore Assertion Failure Denial of Service
New version 3.0.2 (rhbz#2407048) Fixes CVE-2025-11232 (rhbz#2407229)
* bsc#1252281 Cross-References: * CVE-2025-62168
An update that solves one vulnerability can now be installed.
* bsc#1252378 * bsc#1252379 * bsc#1252380 Cross-References:
* bsc#1249375 Cross-References: * CVE-2025-8277
* bsc#1242300 * bsc#1243284 Cross-References: * CVE-2025-47268
* bsc#1246019 * bsc#1248631 * bsc#1249207 * bsc#1249208
This upload fixes a few of security issues in the Python standard library included with PyPy, an alternative implementation of the Python 3 language. CVE-2024-…
* bsc#1248631 * bsc#1249207 * bsc#1249208 Cross-References:
* bsc#1248631 * bsc#1249207 Cross-References: * CVE-2025-38618
* bsc#1248631 Cross-References: * CVE-2025-38664
Multiple security vulnerabilities were found in mediawiki, a website engine for collaborative work, that could lead to information disclosure, denial of servic…
Update to upstream 2.4.3, including fixes for CVE-2025-62513 and CVE-2025-62705.
An update that fixes one vulnerability is now available.
libxml2 could be made to crash or run programs if it opened a specially crafted file.
Update to 9.18.41 (rhbz#2405786) Security fixes: DNSSEC validation fails if matching but invalid DNSKEY is found. (CVE-2025-8677) Address various spoofing atta…
