Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that solves one vulnerability can now be installed.
Update to exiv2-0.28.7, fixes CVE-2025-54080 and CVE-2025-55304.
Update mirrorlist-server to version 3.0.8. Update the maxminddb crate to version 0.26.0. Update the prometheus crate to version 0.14.0. Update the protobuf and…
* bsc#1250553 Cross-References: * CVE-2025-10911
An update that solves one vulnerability can now be installed.
Update to exiv2-0.28.7, fixes CVE-2025-54080 and CVE-2025-55304.
Sabberworm PHP CSS Parser before 8.3.1 calls eval on uncontrolled data, possibly leading to remote code execution if the function allSelectors() or getSelector…
It wasn't easy to be on an admin or cybersecurity team in 2025.
* bsc#1248502 Cross-References: * CVE-2025-8067
* bsc#1249191 * bsc#1249348 * bsc#1249367 Cross-References:
* bsc#1217877 Cross-References: * CVE-2023-45866
* bsc#1239088 * bsc#1242132 * bsc#1245320 Cross-References:
* bsc#1233072 * bsc#1237048 * bsc#1240744 * bsc#1243650 * bsc#1245509
* bsc#1237048 * bsc#1240744 * bsc#1243650 * bsc#1245509 * bsc#1247315
Fix CVE-2025-10729
Apache Subversion could be made to crash if it opened a specially crafted file.
* bsc#1217877 Cross-References: * CVE-2023-45866
* bsc#1248119 * bsc#1248120 * bsc#1248122 Cross-References:
An issue has been found in libfcgi, a FastCGI bridge from CGI. The issue is related to an integer overflow (and resultant heap-based buffer overflow) via craft…
An update that solves 53 vulnerabilities, contains one feature and has 137 security fixes can now be installed.
* bsc#1250232 Cross-References: * CVE-2025-9230
An update that solves 10 vulnerabilities and has one security fix can now be installed.
Update to Python 3.10.19
Update to 3.11.14
