Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1246517 Cross-References: * CVE-2025-53643
KMail Account Wizard uses an insecure protocol.
Several security issues were fixed in KMail.
Several security issues were fixed in PIM Messagelib.
Several security issues were fixed in KDE PIM.
Protocol Buffers could be made to crash if it received specially crafted input.
A vulnerability has been discovered in python-h2, a Python HTTP/2 protocol implementation. CVE-2025-57804
* bsc#1248438 Cross-References: * CVE-2025-20053 * CVE-2025-20109
* bsc#1248438 Cross-References: * CVE-2025-20053 * CVE-2025-20109
* bsc#1248124 Cross-References: * CVE-2025-50817
* bsc#1248994 Cross-References: * CVE-2025-58068
CVE-2025-58068 Eventlet is a concurrent networking library for Python. Eventlet WSGI parser is vulnerable to HTTP Request Smuggling due to improper handling of…
python3.12 security update
python3.11 security update
kernel security update
Several security issues were fixed in ImageMagick.
Two vulnerabilities have been fixed in the audio data read/write library libsndfile.
* bsc#1245938 * bsc#1245939 * bsc#1245942 * bsc#1245943 * bsc#1245946
* bsc#1237805 * bsc#1245254 Cross-References: * CVE-2025-27221
* bsc#1248124 Cross-References: * CVE-2025-50817
DoS with large SAML responses has been fixed in ruby-saml, a library implementing the client side of SAML authorization for the Ruby interpreter.
* bsc#1244270 * bsc#1244272 Cross-References: * CVE-2025-5914
Update to release v0.27.0 Resolves: rhvz#2388453, rhbz#2384137, rhbz#2384154 Upstream new features and fixes
Exiv2 0.28.6 + patch to fix silent abi breakage Exiv2 v0.28.6 (Fixes two low severity CVEs)
