Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1245953 * bsc#1252930 * bsc#1252931 * bsc#1252932 * bsc#1252933
An update that solves one vulnerability can now be installed.
* bsc#1249055 Cross-References: * CVE-2025-7039
* bsc#1253757 Cross-References: * CVE-2025-11563
An update that solves one vulnerability can now be installed.
The SOGo groupware server is vulnerable to Cross Site Scripting (XSS) via the "userName" parameter, allowing arbitrary JavaScript to be executed when a user vi…
* bsc#1252110 * bsc#1252232 Cross-References: * CVE-2025-31133
* bsc#1215199 * bsc#1218644 * bsc#1230062 * bsc#1234634 * bsc#1234693
* bsc#1249191 * bsc#1249348 * bsc#1249367 * bsc#1253757
* bsc#1218644 * bsc#1238472 * bsc#1239206 * bsc#1241166 * bsc#1241637
* bsc#1253278 * bsc#1253642 * bsc#1253703 * jsc#PED-9265
* bsc#1252414 * bsc#1252417 * bsc#1252418 * jsc#PED-14233
* bsc#1250295 * bsc#1251228 * bsc#1251983 Cross-References:
An update that solves three vulnerabilities can now be installed.
Several security vulnerabilities were discovered in the server of the Tryton application platform, which could lead to information disclosure. For the oldstabl…
* bsc#1244680 * bsc#1251305 * bsc#1252974 Cross-References:
* bsc#1249055 Cross-References: * CVE-2025-7039
* bsc#1251983 Cross-References: * CVE-2023-53673
An update that solves one vulnerability can now be installed.
CUPS could be made to crash or run programs as an administrator if it opened a specially crafted file.
Several security issues were fixed in WebKitGTK.
* bsc#1249087 * bsc#1249179 * bsc#1249180 * bsc#1249181 * bsc#1251279
* bsc#1249584 Cross-References: * CVE-2025-59375
* bsc#1250553 * bsc#1251979 Cross-References: * CVE-2025-10911
