Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that fixes one vulnerability is now available.
A vulnerability has been discovered in libcommons-lang-java, a set of Java classes that provide helper methods for standard Java classes. CVE-2025-48924
Update to 138.0.7204.168 CVE-2025-8010: Type Confusion in V8 CVE-2025-8011: Type Confusion in V8
It was discovered that there was a potential HTTP Parameter Pollution (HPP) issue in node-form-data, a tool to create multipart/form-data streams module in Nod…
Stefan Buehler discovered a flaw in sope, the set of Objective-C frameworks powering SOGo, which may result in denial of service via a specially crafted POST r…
* bsc#1246232 * bsc#1246267 * bsc#1246299 Cross-References:
Several security issues were discovered in Redis, a persistent key-value database, which could result in the execution of arbitrary code or denial of service.
* bsc#1234675 * bsc#1235461 * bsc#1235871 Cross-References:
* bsc#1236621 * bsc#1243009 * bsc#1243105 * bsc#1243268 * bsc#1243274
* bsc#1236621 * bsc#1243009 * bsc#1243105 * bsc#1243268 * bsc#1243274
* bsc#1236621 * bsc#1243009 * bsc#1243105 * bsc#1243268 * bsc#1243274
* bsc#1244795 * bsc#1246058 * bsc#1246059 Cross-References:
* bsc#1246575 * bsc#1246580 * bsc#1246584 * bsc#1246595 * bsc#1246598
* bsc#1242893 * bsc#1242898 * bsc#1244166 Cross-References:
fix CVE-2025-8176: use after free in tiffmedian (rhbz#2383821) fix CVE-2025-8177: buffer oveflow in thumbnail setrow when processing malformed TIFF (rhbz#23838…
Several security issues were fixed in cloud-init.
* bsc#1246575 * bsc#1246580 * bsc#1246595 * bsc#1246598
* bsc#1244670 * bsc#1246664 Cross-References: * CVE-2025-6424
* bsc#1246296 Cross-References: * CVE-2025-7425
* bsc#1240150 * bsc#1241830 * bsc#1242114 * bsc#1243833 * bsc#1244035
Threat actors have been observed exploiting a now-patched critical SAP NetWeaver flaw to deliver the Auto-Color backdoor in an attack targeting a U.S.-based ch…
Backport fixes for CVE-2024-6174 and CVE-2024-11584 cloud-init included the systemd socket unit cloud-init-hotplugd.socket with default SocketMode that grants …
Update to 138.0.7204.168 CVE-2025-8010: Type Confusion in V8 CVE-2025-8011: Type Confusion in V8
Backport fixes for CVE-2024-6174 and CVE-2024-11584 cloud-init included the systemd socket unit cloud-init-hotplugd.socket with default SocketMode that grants …
