Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1182185 * bsc#1246989 Cross-References: * CVE-2021-3121
* bsc#1246318 * bsc#1246388 Cross-References: * CVE-2025-49125
An update that fixes two vulnerabilities is now available.
* bsc#1232234 * bsc#1246221 Cross-References: * CVE-2024-10041
* bsc#1232234 * bsc#1246221 Cross-References: * CVE-2024-10041
* bsc#1196654 * bsc#1211298 * bsc#1211798 * bsc#1211994 * bsc#1213326
* bsc#1139073 * bsc#1204142 * bsc#1219338 * bsc#1225707 * bsc#1230216
Two vulnerabilities have been fixed in the IP bandwidth measuring tool iperf3. CVE-2025-54349
Vulnerabilities were found in unbound, a validating, recursive, and caching DNS resolver, which may lead to Denial of Service or cache poisoning.
An update that fixes one vulnerability is now available.
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. For the oldstable distribution (bookworm), thes…
Security fixes Bumped the minimum github.com/go-viper/mapstructure/v2 version to 2.3.0 for GHSA-fv92-fjc5-jj9h or GO-2025-3787 Bumped the minimum github.com/NV…
Update to release v1.32.7 Resolves: rhbz#2388412 Resolves: CVE-2025-5187: Nodes can delete themselves by adding an OwnerReference Upstream fixes
Update to release v1.31.12 Resolves: rhbz#2388412 Resolves: CVE-2025-5187: Nodes can delete themselves by adding an OwnerReference Upstream fix
Update to 1.67.0 Update to 1.66.0
Update to release v1.33.4 Resolves: rhbz#2388412 Fixes CVE-2025-5187: Nodes can delete themselves by adding an OwnerReference Upstream fixes
Update to release v1.31.12 Resolves: rhbz#2388412 Resolves: CVE-2025-5187: Nodes can delete themselves by adding an OwnerReference Upstream fix
Update to release v1.32.7 Resolves: rhbz#2388412 Resolves: CVE-2025-5187: Nodes can delete themselves by adding an OwnerReference Upstream fixes
This update removes the usage of the C (Credential) flag for the binfmt_misc registration within the qemu-user package, as it allowed for privilege escalation …
It was discovered that there was a potential use after free vulnerability in mupdf, a lightweight PDF viewer. This could have allowed remote attackers to cause…
* bsc#1248006 Cross-References: * CVE-2025-55159
* bsc#1248006 Cross-References: * CVE-2025-55159
Several security issues were fixed in PHP.
* bsc#1248006 Cross-References: * CVE-2025-55159
