Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1242015 Cross-References: * CVE-2025-3891
Two vulnerabilities have been fixed in cJSON, a C library for parsing JSON. CVE-2023-26819
Fix CVE-2025-49112 Fix CVE-2025-49112
Update to 137.0.7151.103 CVE-2025-5958: Use after free in Media CVE-2025-5959: Type Confusion in V8
This release includes improvements and fixes, and updates crossbeam-channel dependency to address CVE-2025-4574
This release includes improvements and fixes, and updates crossbeam-channel dependency to address CVE-2025-4574
This release includes improvements and fixes, and updates crossbeam-channel dependency to address CVE-2025-4574
This release includes improvements and fixes, and updates crossbeam-channel dependency to address CVE-2025-4574
The package python-django before version 5.1.11-1 is vulnerable to content spoofing.
The package konsole before version 25.04.2-1 is vulnerable to arbitrary code execution.
The package go before version 1.24.4-1 is vulnerable to multiple issues including certificate verification bypass and information disclosure.
The package samba before version 4.22.2-1 is vulnerable to access restriction bypass.
The package curl before version 8.14.1-1 is vulnerable to denial of service.
* bsc#1244035 Cross-References: * CVE-2025-22868 * CVE-2025-22869
* bsc#1244095 Cross-References: * CVE-2025-48432
* bsc#1242015 Cross-References: * CVE-2025-3891
* bsc#1224280 Cross-References: * CVE-2024-28285
* bsc#1241865 Cross-References: * CVE-2025-22872
* bsc#1241865 Cross-References: * CVE-2025-22872
Fix CVE-2025-49112
Update to 2.74.0 - Fixes CVE-2025-48938
Backport fix for CVE-2025-5222.
Fix CVE-2025-48387.
* bsc#1238324 * bsc#1239077 Cross-References: * CVE-2022-49080
