Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The package freetype2 before version 2.13.3-3 is vulnerable to arbitrary code execution.
The package python-django before version 5.1.9-1 is vulnerable to denial of service.
The package dropbear before version 2025.88-1 is vulnerable to arbitrary command execution.
The package nodejs-lts-iron before version 20.19.2-1 is vulnerable to multiple issues including denial of service and access restriction bypass.
* bsc#1240897 Cross-References: * CVE-2025-3360
* bsc#1234847 Cross-References: * CVE-2024-53156
* bsc#1242631 * bsc#1243177 Cross-References: * CVE-2025-3416
Security fix for CVE-2010-1028 and other security-relevant bugs; see https://github.com/bramstein/sfnt2woff-zopfli/pull/20/commits.
Security fix for CVE-2010-1028 and other security-relevant bugs; see https://github.com/bramstein/sfnt2woff-zopfli/pull/20/commits.
Fix for CVE-2025-47268
Update to version 12.5.2. Fixes CVE-2025-22247
Security fix for CVE-2010-1028 and other security-relevant bugs; see https://github.com/bramstein/sfnt2woff-zopfli/pull/20/commits.
Security fix for CVE-2010-1028 and other security-relevant bugs; see https://github.com/bramstein/sfnt2woff-zopfli/pull/20/commits.
* bsc#1242015 Cross-References: * CVE-2025-3891
* bsc#1242894 * bsc#1242899 Cross-References: * CVE-2025-32441
grafana security update
Microcode updates has been released for Intel(R) processors, addressing multiple potential vulnerabilties that may allow denial of service or information discl…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.
Update to 136.0.7103.113 CVE-2025-4664: Insufficient policy enforcement in Loader CVE-2025-4609: Incorrect handle provided in unspecified circumstances in Mojo
Update to 136.0.7103.113 CVE-2025-4664: Insufficient policy enforcement in Loader CVE-2025-4609: Incorrect handle provided in unspecified circumstances in Mojo
Several vulnerabilities were discovered in OpenAFS, an implementation of the AFS distributed filesystem, which may result in theft of credentials in Unix clien…
x86: Indirect Target Selection [XSA-469, CVE-2024-28956]
update to 4.8.2 fixing CVE-2024-47619
update to 4.8.2 to fix CVE-2024-47619
