Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1244670 * bsc#1246664 Cross-References: * CVE-2025-6424
* bsc#1246296 Cross-References: * CVE-2025-7425
* bsc#1240150 * bsc#1241830 * bsc#1242114 * bsc#1243833 * bsc#1244035
Threat actors have been observed exploiting a now-patched critical SAP NetWeaver flaw to deliver the Auto-Color backdoor in an attack targeting a U.S.-based ch…
Backport fixes for CVE-2024-6174 and CVE-2024-11584 cloud-init included the systemd socket unit cloud-init-hotplugd.socket with default SocketMode that grants …
Update to 138.0.7204.168 CVE-2025-8010: Type Confusion in V8 CVE-2025-8011: Type Confusion in V8
Backport fixes for CVE-2024-6174 and CVE-2024-11584 cloud-init included the systemd socket unit cloud-init-hotplugd.socket with default SocketMode that grants …
* bsc#1246855 Cross-References: * CVE-2025-54121
Perl could be made to target unintended paths when performing file operations.
This update fixes CVE-2025-8058, a low-impact security vulnerability in the regcomp function.
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in denial of service or server side…
SQLite could be made to crash or run programs if it received specially crafted input.
* bsc#1236621 * bsc#1243268 * bsc#1244561 * bsc#1244564 * bsc#1244565
* bsc#1245936 Cross-References: * CVE-2016-9840
Two issues have been found in libcaca, a colour ASCII art library. Both are related to heap buffer overflow, which might lead to memory corruption.
It was discovered that there was a potential null pointer dereference vulnerability in libetpan, an low-level library for handling email.
* bsc#1229007 Cross-References: * CVE-2024-7409
* bsc#1246664 Cross-References: * CVE-2025-8027 * CVE-2025-8028
Update to 20250602 with fixes for CVE-2025-48964
An update that fixes two vulnerabilities is now available.
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language, which could result in server side request forgery or …
An update that fixes 8 vulnerabilities is now available.
An update that fixes three vulnerabilities is now available.
An update that fixes one vulnerability is now available.
