Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
kernel security update
Two vulnerabilities have been fixed in the audio data read/write library libsndfile.
* bsc#1245938 * bsc#1245939 * bsc#1245942 * bsc#1245943 * bsc#1245946
* bsc#1237805 * bsc#1245254 Cross-References: * CVE-2025-27221
* bsc#1248124 Cross-References: * CVE-2025-50817
DoS with large SAML responses has been fixed in ruby-saml, a library implementing the client side of SAML authorization for the Ruby interpreter.
* bsc#1244270 * bsc#1244272 Cross-References: * CVE-2025-5914
Exiv2 0.28.6 + patch to fix silent abi breakage Exiv2 v0.28.6 (Fixes two low severity CVEs)
Update to 139.0.7258.154 CVE-2025-9478: Use after free in ANGLE
A vulnerability has been discovered in libcommons-lang3-java, a set of Java classes that provide helper methods for standard Java classes. CVE-2025-48924
Update to 139.0.7258.154 CVE-2025-9478: Use after free in ANGLE
CVE-2025-8067 Out-Of-Bounds Read in UDisks Daemon
CVE-2025-8010: Type Confusion in V8 CVE-2025-8011: Type Confusion in V8 CVE-2025-8576: Use after free in Extensions CVE-2025-8578: Use after free in Cast CVE-2…
Two vulnerabilities were discovered in the Firebird database, which may result in denial of service or authentication bypass. For the stable distribution (trix…
An update that fixes one vulnerability is now available.
The previous update, 2.16.9-0.1+deb11u2, fixed the following security issue: CVE-2025-47917
* bsc#1240414 Cross-References: * CVE-2025-31115
* bsc#1238078 * bsc#1243450 * bsc#1244116 Cross-References:
* bsc#1220262 Cross-References: * CVE-2023-50782
* bsc#1246152 Cross-References: * CVE-2025-53547
Multiple vulnerabilities were discovered in Node.js, which could result in denial of service, HTTP request smuggling, privilege escalation, a side channel atta…
* bsc#1246873 Cross-References: * CVE-2025-7962
* bsc#1243314 Cross-References: * CVE-2025-4945
* bsc#1248124 Cross-References: * CVE-2025-50817
