Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1111638 Cross-References: * CVE-2018-18088
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability and contains two features can now be installed.
* bsc#1111638 Cross-References: * CVE-2018-18088
* bsc#1244691 * jsc#PED-13442 * jsc#PED-13443 Cross-References:
* bsc#1246001 * bsc#1247499 Cross-References: * CVE-2025-38181
- Update to 140.0.7339.185 * CVE-2025-10585: Type Confusion in V8 * CVE-2025-10500: Use after free in Dawn * CVE-2025-10501: Use after free in WebRTC * CVE-202…
Update to expat-2.7.2, fixes CVE-2025-59375.
Security fix for the bundled urllib3 for CVE-2025-50181
Update to 8.6.1
Update to 8.6.1
Update to expat-2.7.2, fixes CVE-2025-59375.
Ceph a distributed filesystem was affected by multiple vulnerabilties CVE-2021-3979
sha.js could be made to consume resources or return incorrect hash values if it received specially crafted input.
PCRE2 could be made to expose sensitive information.
Two vulnerabilities were found in libxslt, an XSLT 1.0 processing library, which could lead to to denial of service or information disclosure.
Several security issues were fixed in Gnuplot.
Eventlet could be made to bypass front-end security controls if it received a specially crafted request.
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
Update to 2.50.0: Improved rendering performance by recording each layer once and replaying every dirty region in different worker threads. Enable damage propa…
* bsc#1246001 * bsc#1246356 * bsc#1247499 Cross-References:
- Update to 140.0.7339.185 * CVE-2025-10585: Type Confusion in V8 * CVE-2025-10500: Use after free in Dawn * CVE-2025-10501: Use after free in WebRTC * CVE-202…
The update for libxslt announced in DSA 5979-1 introduced a regression while back porting the upstream deterministic generate-id implementation, which makes th…
An update that solves 35 vulnerabilities, contains one feature and has four security fixes can now be installed.
