Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1242300 * bsc#1243284 Cross-References: * CVE-2025-47268
* bsc#1241584 * bsc#1241585 * bsc#1241642 * bsc#1241643
* bsc#1243268 Cross-References: * CVE-2025-47287
* bsc#1240392 Cross-References: * CVE-2025-2704
* bsc#1236974 Cross-References: * CVE-2024-12243
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-24223
This release fixes an integer and heap buffer overflow when processing a user FastCGI request.
Typo fix in test patch
Add patch for double free
This release fixes an integer and heap buffer overflow when processing a user FastCGI request.
Multiple security vulnerabilities have been fixed in EDK II, a modern, feature-rich, cross-platform firmware development environment. Remotely exploitable buff…
* bsc#1239889 Cross-References: * CVE-2025-31335
* bsc#1242631 Cross-References: * CVE-2025-3416
* bsc#1241691 Cross-References: * CVE-2025-2761
It was discovered that libfile-find-rule-perl, a module to search for files based on rules, is vulnerable to arbitrary code execution when grep() encounters a …
It was discovered that libfile-find-rule-perl, a module to search for files based on rules, is vulnerable to arbitrary code execution when grep() encounters a …
* bsc#1243313 Cross-References: * CVE-2025-47273
Vulnerabilities was discovered in MariaDB, a SQL database server compatible with MySQL. CVE-2025-30693
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. Google is awar…
Update to 3.0.14 and fix CVE-2025-27110
Update to 3.0.14 and fix CVE-2025-27110
lua-http fix of CVE-2023-4540
Fix for local information disclosure in systemd-coredump (CVE-2025-4598) Various other fixes
Two security vulnerabilities have been discovered in Asterisk, an Open Source Private Branch Exchange. CVE-2025-47779
