Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1238896 * bsc#1244644 * bsc#1246112 Cross-References:
* bsc#1027519 * bsc#1234282 * bsc#1238043 * bsc#1238896 * bsc#1243117
* bsc#1244554 * bsc#1244555 * bsc#1244557 * bsc#1244590 * bsc#1244700
* bsc#1027519 * bsc#1238896 * bsc#1244644 * bsc#1246112 * jsc#PED-8907
* bsc#1245625 Cross-References: * CVE-2025-52886
* bsc#1244663 Cross-References: * CVE-2025-4565
* bsc#1244663 Cross-References: * CVE-2025-4565
* bsc#1244663 Cross-References: * CVE-2025-4565
Roundcube Webmail could be made to expose sensitive information over the network.
Update to 3.5.29, fixes CVE-2025-53367.
* bsc#1012628 * bsc#1151679 * bsc#1151680 * bsc#1151794 * bsc#1151927
Several security issues were fixed in GNU C Library.
* bsc#1244406 Cross-References: * CVE-2025-47183
Multiple vulnerabilities have been fixed in the multimedia framework FFmpeg. CVE-2023-6601
Several security issues were fixed in Nix.
Update to 2.32.4. Fixes CVE-2024-47081.
Update to 3.5.29, fixes CVE-2025-53367.
This updates gnutls to the latest upstream release. Notable changes are: PKCS#11 cryptographic provider support Support for kTLS rekeying with kernel 6.14+ Sup…
Fixes CVE-2025-40909 - Clone dirhandles without fchdir
Two issues were discovered in Redis, the key-value database: * CVE-2025-32023: An authenticated user may have used a specially-crafted string to trigger a stac…
Fixes CVE-2025-40909 - Clone dirhandles without fchdir
Fix CVE-2024-25176
Multiple vulnerabilities have been fixed in the email, calendar and contacts client Thunderbird. CVE-2025-5986
* bsc#1243388 Cross-References: * CVE-2021-41190
