Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Several security issues were fixed in Libxslt.
Several security issues were fixed in libmspack.
Several security issues were fixed in Django.
* bsc#1236851 * bsc#1248070 Cross-References: * CVE-2025-23419
* bsc#1242601 * bsc#1243869 Cross-References: * CVE-2024-12224
BIRD 3.1.4 (2025-09-22) BGP: Fixed crash on Notification with a message, CVE-2025-59688 BGP: Fixed invalid memory access in pending TX flush BGP: Fixed a rare …
Update to version 1.6.2. Includes fixes for CVE-2025-58066 (potential DoS in the ntpd-rs server) and CVE-2025-58160 (potential tracing log pollution).
Update to 1.9.11 to fix CVE-2025-30187
Update the ammonia crate to version 3.3.1 and rebuild python-nh3 to apply fixes for RUSTSEC-2025-0071.
Update the ammonia crate to version 3.3.1 and rebuild python-nh3 to apply fixes for RUSTSEC-2025-0071.
An issue was found in open-vm-tools, a set of tools for VMs hosted on VMware. The issue is related to a local privilege escalation in combination with the get-…
BIRD 3.1.4 (2025-09-22) BGP: Fixed crash on Notification with a message, CVE-2025-59688 BGP: Fixed invalid memory access in pending TX flush BGP: Fixed a rare …
Update to version 1.6.2. Includes fixes for CVE-2025-58066 (potential DoS in the ntpd-rs server) and CVE-2025-58160 (potential tracing log pollution).
Update to 2.0.1 to CVE-2025-30187
Update the ammonia crate to version 4.1.2 and rebuild python-nh3 to apply fixes for RUSTSEC-2025-0071.
Update the ammonia crate to version 4.1.2 and rebuild python-nh3 to apply fixes for RUSTSEC-2025-0071.
Update to mapserver-8.4.1, fixes CVE-2025-59431.
A regression has been discovered in the latest release 2.6-9+deb11u1 of libcommons-lang-java. The patch to fix CVE-2025-48924 had not been properly backported.
Two security issues were found in libxml2, the GNOME XML library, which could yield denial of service or heap corruption. CVE-2025-9714
A vulnerability has been fixed in libcpanel-json-xs-perl, a Perl module for serialising to JSON. CVE-2025-40929
A vulnerability has been fixed in libjson-xs-perl, a Perl module which does C/XS-accelerated manipulation of JSON-formatted data. CVE-2025-40928
A regression has been discovered in the latest release 3.11-1+deb11u1 of libcommons-lang3-java. The patch to fix CVE-2025-48924 had not been properly backporte…
Several security issues were fixed in OpenSSL.
Several security issues were fixed in OpenSSL.
