Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to 3.13.5, this release fixes the following CVEs: CVE 2024-12718, CVE 2025-4138, CVE 2025-4330, CVE-2025-4435, and CVE 2025-4517
* bsc#1235062 * bsc#1235129 * bsc#1235231 Cross-References:
* bsc#1235231 Cross-References: * CVE-2024-56601
* bsc#1240688 Cross-References: * CVE-2025-3155
Update to version 2.1.1 for various bugfixes. This also fixes CVE-2025-22872 in the bundled golang.org/x/net/html.
Update to 0.087, fixes CVE-2025-40914
Update to 0.35, fixes CVE-2024-2467
A buffer overflow was discovered in the International Components for Unicode (ICU) library. For the stable distribution (bookworm), this problem has been fixed…
* bsc#1227903 * bsc#1232908 * bsc#1232929 * bsc#1233680 * bsc#1233708
* bsc#1232908 * bsc#1232929 * bsc#1233680 * bsc#1233708 * bsc#1235062
* bsc#1232908 * bsc#1232929 * bsc#1233680 * bsc#1233708 * bsc#1235062
* bsc#1238730 * bsc#1241331 Cross-References: * CVE-2022-49179
Several security vulnerabilities have been discovered in freeradius, a highly configurable RADIUS server.
* bsc#1243565 * bsc#1245054 * bsc#1245055 Cross-References:
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.
xorg-x11-server CVE fix for CVE-2025-49175, CVE-2025-49176, CVE-2025-49177, CVE-2025-49178, CVE-2025-49179, CVE-2025-49180
Upgrade to libtpms 0.10.1 fixing CVE-2025-49133
Brief introduction Multiple memory related vulnerabilities, inlcuding use-after-free,
* bsc#1244148 Cross-References: * CVE-2011-10007
Nils Emmerich discovered several vulnerabilities in the Xorg X server, which may result in privilege escalation if the X server is running privileged.
commons-beanutils, utility for manipulating Java beans have an improper Access Control vulnerability. A special BeanIntrospector class was added in version 1.9…
* bsc#1239192 Cross-References: * CVE-2025-22868
* bsc#1244058 Cross-References: * CVE-2025-5473
* bsc#1238730 Cross-References: * CVE-2022-49545
