Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
ruby-graphql is GraphQL language and runtime for Ruby. It was discovered that loading a malicious schema definition in `GraphQL::Schema.from_introspection` (or…
Update to 138.0.7204.183 * CVE-2025-8292: Use after free in Media Stream
This update fixes CVE-2025-7345 and CVE-2025-6199.
This update fixes these CVEs: CVE-2025-32364 CVE-2025-32365 CVE-2024-56378
reposurgeon: update to 5.3 version
Stefan Buehler discovered a flaw in sope, the set of Objective-C frameworks powering SOGo, which may result in denial of service via a specially crafted POST r…
This update fixes these CVEs: CVE-2025-4948 CVE-2025-32908 CVE-2025-32907 CVE-2025-4969
Backports patch to fix non-CVE 2025-8224
* bsc#1241865 Cross-References: * CVE-2025-22872
* bsc#1206051 * bsc#1221829 * bsc#1233551 * bsc#1234480 * bsc#1234863
* bsc#1246232 * bsc#1246233 * bsc#1246267 * bsc#1246299
* bsc#1230360 Cross-References: * CVE-2024-45751
* bsc#1243855 Cross-References: * CVE-2024-12224
* bsc#1243868 Cross-References: * CVE-2024-12224
* bsc#1221107 Cross-References: * CVE-2024-2236
An update that fixes one vulnerability is now available.
A vulnerability has been discovered in libcommons-lang-java, a set of Java classes that provide helper methods for standard Java classes. CVE-2025-48924
Update to 138.0.7204.168 CVE-2025-8010: Type Confusion in V8 CVE-2025-8011: Type Confusion in V8
It was discovered that there was a potential HTTP Parameter Pollution (HPP) issue in node-form-data, a tool to create multipart/form-data streams module in Nod…
Stefan Buehler discovered a flaw in sope, the set of Objective-C frameworks powering SOGo, which may result in denial of service via a specially crafted POST r…
* bsc#1244795 * bsc#1246058 * bsc#1246059 Cross-References:
* bsc#1246575 * bsc#1246580 * bsc#1246584 * bsc#1246595 * bsc#1246598
* bsc#1242893 * bsc#1242898 * bsc#1244166 Cross-References:
fix CVE-2025-8176: use after free in tiffmedian (rhbz#2383821) fix CVE-2025-8177: buffer oveflow in thumbnail setrow when processing malformed TIFF (rhbz#23838…
