The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1232900 * bsc#1238324 * bsc#1239077 * bsc#1239096
* bsc#1238324 * bsc#1239077 Cross-References: * CVE-2022-49080
* bsc#1238324 * bsc#1239077 Cross-References: * CVE-2022-49080
* bsc#1225947 * bsc#1230427 * bsc#1240379 * bsc#1240380 * bsc#1240381
* bsc#1242300 Cross-References: * CVE-2025-47268
* bsc#1239909 Cross-References: * CVE-2025-2588
A number of vulnerabilities were discovered in Django, a popular Python-based web-development framework: * CVE-2025-48432: Potential log injection via unescape…
Kirill Firsov discovered that Roundcube, a skinnable AJAX based webmail solution for IMAP servers, was performing PHP Object deserialization on unvalidated inp…
Several vulnerabilities were discovered in modsecurity-apache, an Apache module to tighten the Web application security, which may result in denial of service …
Add patch for double free
Backport fixes for CVE-2025-4476, CVE-2025-4948, CVE-2025-4969, CVE-2025-46420, CVE-2025-46421, CVE-2025-4945
Fix CVE-2025-23016
Backport fix for CVE-2025-3887.
sort: fix buffer under-read (CVE-2025-5278)
Fix CVE-2025-23016
Backport fix for CVE-2025-3887.
Backport fixes for CVE-2025-4476, CVE-2025-4948, CVE-2025-4969, CVE-2025-46420, CVE-2025-46421, CVE-2025-4945
Update to Samba 4.22.2 - Security fix for CVE-2025-0620
Update to 137.0.7151.68 CVE-2025-5419: Out of bounds read and write in V8 CVE-2025-5068: Use after free in Blink
This update includes mod_security version 2.9.9 which addresses CVE-2025-47947 and includes various bug fixes. See https://github.com/owasp- modsecurity/ModSec…
Update to 137.0.7151.68 CVE-2025-5419: Out of bounds read and write in V8 CVE-2025-5068: Use after free in Blink
This update includes mod_security version 2.9.9 which addresses CVE-2025-47947 and includes various bug fixes. See https://github.com/owasp- modsecurity/ModSec…
* bsc#1241028 * bsc#1241031 Cross-References: * CVE-2025-32386
Several vulnerabilities were discovered in GIMP, the GNU Image Manipulation Program, which could result in denial of service or potentially the execution of ar…