Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Rebuild applications to apply two recent security updates: build with idna 1.0.0+ to address CVE-2024-12224 (idna accepts Punycode labels that do not produce a…
Rebuild applications to apply two recent security updates: build with idna 1.0.0+ to address CVE-2024-12224 (idna accepts Punycode labels that do not produce a…
Rebuild applications to apply two recent security updates: build with idna 1.0.0+ to address CVE-2024-12224 (idna accepts Punycode labels that do not produce a…
Rebuild applications to apply two recent security updates: build with idna 1.0.0+ to address CVE-2024-12224 (idna accepts Punycode labels that do not produce a…
Two vulnerabilities were discovered in Nginx, a high-performance web and reverse proxy server, more precisely in ngx_http_lua_module, which embeds the Lua scri…
* bsc#1231039 * bsc#1232747 Cross-References: * CVE-2024-44185
* bsc#1238730 * bsc#1241331 Cross-References: * CVE-2022-49179
* bsc#1227903 * bsc#1232929 * bsc#1233680 * bsc#1233708 * bsc#1235062
* bsc#1161007 * bsc#1167603 * bsc#1193951 * bsc#1243721
* bsc#1243226 Cross-References: * CVE-2025-6018
* bsc#1243226 Cross-References: * CVE-2025-6018
* bsc#1243226 Cross-References: * CVE-2025-6018
* bsc#1232908 * bsc#1232927 * bsc#1232929 * bsc#1233245 * bsc#1233680
* bsc#1235231 Cross-References: * CVE-2024-56601
qt5-qtbase security update
This update addresses two string function vulnerabilities specific to POWER10 machines (CVE-2025-5702, CVE-2025-5745) and fixes a bug in TLS management when au…
Update to 7.9.1
FIx CVE-2025-6052.
Update to 7.9.1
FIx CVE-2025-6052.
Nils Emmerich discovered several vulnerabilities in the Xorg X server, which may result in privilege escalation if the X server is running privileged.
Apache Log4j could be made to run programs as your login if it opened a specially crafted file.
* bsc#1243721 Cross-References: * CVE-2025-5222
Update to 78.1.1, fixes CVE-2025-47273.
