Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1246623 * jsc#PED-13306 Cross-References: * CVE-2025-40918
CVE-2025-8067 Out-Of-Bounds Read in UDisks Daemon
An update that fixes one vulnerability is now available.
* bsc#1237093 Cross-References: * CVE-2025-1094
FFmpeg could be made to crash if it received specially crafted input.
A couple of vulnerabilities have been fixed in ClamAV, an anti-virus utility for Unix. CVE-2025-20128
* bsc#1246058 * bsc#1246059 Cross-References: * CVE-2025-32023
Several security issues were fixed in RubyGems.
USN-7648-2 introduced a regression in PHP
Several security issues were fixed in Ruby.
Protocol Buffers could be made to crash if it received specially crafted input.
Exiv2 0.28.6 + patch to fix silent abi breakage Exiv2 v0.28.6 (Fixes two low severity CVEs)
Apply fix for CVE-2025-9300
Apply fix for CVE-2025-9300
* bsc#1246517 Cross-References: * CVE-2025-53643
Protocol Buffers could be made to crash if it received specially crafted input.
A vulnerability has been discovered in python-h2, a Python HTTP/2 protocol implementation. CVE-2025-57804
* bsc#1248438 Cross-References: * CVE-2025-20053 * CVE-2025-20109
* bsc#1248438 Cross-References: * CVE-2025-20053 * CVE-2025-20109
* bsc#1248124 Cross-References: * CVE-2025-50817
* bsc#1248994 Cross-References: * CVE-2025-58068
CVE-2025-58068 Eventlet is a concurrent networking library for Python. Eventlet WSGI parser is vulnerable to HTTP Request Smuggling due to improper handling of…
python3.12 security update
python3.11 security update
