Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Multiple security issues were discovered in Unbound, a validating, recursive, caching DNS resolver, which may result in denial of service or cache poisoning vi…
* bsc#1244252 Cross-References: * CVE-2025-5115
* bsc#1248119 * bsc#1248120 * bsc#1248122 Cross-References:
* bsc#1248119 * bsc#1248120 * bsc#1248122 Cross-References:
* bsc#1246790 Cross-References: * CVE-2025-7700
* bsc#1248143 Cross-References: * CVE-2025-54989
* bsc#1243895 Cross-References: * CVE-2025-48989
fix CVE-2025-9165: memory leak in tiffcmp (rhbz#2389608)
Update to upstream version 0.2.8 Update idna dependency to a version not affected by CVE-2024-12224
fix CVE-2025-8534: null pointer dereference in tiff2ps (rhbz#2386494) fix CVE-2024-13978: null pointer dereference in tiff2pdf (rhbz#2386201)
Nikita Skorovoda discovered that Node cipher-base, an abstract base class for crypto-streams, performed incomplete type checks. For the oldstable distribution …
GNU binutils could be made to crash if it received a specially crafted input.
Several security issues were fixed in GStreamer Base Plugins.
Several security issues were fixed in GStreamer Good Plugins.
An update that solves two vulnerabilities and has one errata is now available.
thunderbird security update
Updated to 139.0.7258.138 CVE-2025-9132: Out of bounds write in V8
Python 3.13.7 is the seventh maintenance release of 3.13. 3.13.7 is an expedited release to fix a significant issue with the 3.13.6 release: gh-137583: Regress…
Python 3.13.7 is the seventh maintenance release of 3.13. 3.13.7 is an expedited release to fix a significant issue with the 3.13.6 release: gh-137583: Regress…
Multiple vulnerabilities were found in luajit, a just in time compiler for the Lua programming language, which could lead to denial of service. CVE-2019-19391
An update that fixes one vulnerability is now available.
Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitr…
nginx could be made to expose sensitive information over the network.
* bsc#1248461 Cross-References: * CVE-2025-9301
