Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
USN-5495-1 introduced a regression in curl
USN-7280-2 introduced a regression in Python 2.7
USN-7280-2 introduced a regression in Python 2.7
USN-7015-4 introduced a regression in Python 2.7
USN-7015-4 introduced a regression in Python 2.7
* bsc#1247674 Cross-References: * CVE-2025-54571
An update that solves one vulnerability can now be installed.
* bsc#1247674 Cross-References: * CVE-2025-54571
* bsc#1236658 * bsc#1236746 * bsc#1237208 * bsc#1237308 * bsc#1237585
* bsc#1245772 * bsc#1245795 * bsc#1246001 * bsc#1246356 * bsc#1247499
An update that solves seven vulnerabilities can now be installed.
An update that solves three vulnerabilities can now be installed.
* bsc#1246001 * bsc#1247499 * bsc#1248298 Cross-References:
An update that solves seven vulnerabilities can now be installed.
* bsc#1245772 * bsc#1245795 * bsc#1246001 * bsc#1246356 * bsc#1247499
Firefox 140.3.1 has been released, which fixes connection errors with some sites; if HTTP/3 connections failed, the fallback is now handled more gracefully.
Several security issues were fixed in Qt.
Several security issues were fixed in Inetutils.
Update to 140.0.7339.207 * CVE-2025-10890: Side-channel information leakage in V8 * CVE-2025-10891: Integer overflow in V8 * CVE-2025-10892: Integer overflow i…
node-tar-fs versions prior to 3.1.1, 2.1.3, and 1.16.5 are vulnerable to symlink validation bypass if the destination directory is predictable with a specific …
Several vulnerabilities were discovered in GIMP, the GNU Image Manipulation Program, which could result in denial of service or potentially the execution of ar…
It was discovered that the symlink validation in node-tar-fs, a Node.js module that provides filesystem-like access to tar files, could be bypassed.
Firefox 140.3.1 has been released, which fixes connection errors with some sites; if HTTP/3 connections failed, the fallback is now handled more gracefully.
An update that solves 2 vulnerabilities can now be installed.
