Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to 9.18.44 (rhbz#2431609) Security Fixes: Fix incorrect length checks for BRID and HHIT records. (CVE-2025-13878) Bug Fixes: Allow glue in delegations w…
Update to 13.0.10.
An update that fixes one vulnerability, contains one feature is now available.
Sudo, a program designed to allow a sysadmin to give limited root privileges to users and log root activity, was affected by multiple vulnerabilities. CVE-2023…
An update that can now be installed.
An update that solves one vulnerability and has one bug fix can now be installed.
An update that solves one vulnerability and has one bug fix can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
This update bumps the bundled lodash to 4.17.23 to ensure openQA is protected against CVE-2025-13465. It likely was not vulnerable in any case, though, as I do…
Regenerate vendor tarball. Fixes CVE-2025-13465.
Regenerate vendor tarball. Fixes CVE-2025-13465.
Version 12.5.8 - 2026-01-27 Changed To prevent Poisoned Pipeline Execution (PPE) attacks using prepared .coverage files in pull requests, a PHPT test will no l…
Version 11.5.50 - 2026-01-27 Changed To prevent Poisoned Pipeline Execution (PPE) attacks using prepared .coverage files in pull requests, a PHPT test will no …
Version 10.5.63 - 2026-01-27 Fixed Regression introduced in PHPUnit 9.6.33 Version 10.5.62 - 2026-01-27 Changed
tracker-miners could be made to crash or run programs as your login if it opened a specially crafted file.
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the oldsta…
Several security vulnerabilities have been found in Tomcat 11, a Java web server and servlet engine. This update improves the handling of HTTP/2 connections an…
Several security vulnerabilities have been found in Tomcat 10, a Java web server and servlet engine. This update improves the handling of HTTP/2 connections an…
An update that solves four vulnerabilities and contains one feature can now be installed.
An update that solves four vulnerabilities and contains one feature can now be installed.
An update that solves four vulnerabilities and has one security fix can now be installed.
An update that solves four vulnerabilities and has one security fix can now be installed.
