Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1246855 Cross-References: * CVE-2025-54121
Perl could be made to target unintended paths when performing file operations.
Several security issues were fixed in OpenJDK 11.
Several security issues were fixed in OpenJDK 8.
This update fixes CVE-2025-8058, a low-impact security vulnerability in the regcomp function.
* bsc#1012628 * bsc#1151679 * bsc#1151680 * bsc#1151794 * bsc#1151927
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in denial of service or server side…
SQLite could be made to crash or run programs if it received specially crafted input.
poppler could be made to crash or run programs if it opened a specially crafted file.
* bsc#1236621 * bsc#1243268 * bsc#1244561 * bsc#1244564 * bsc#1244565
* bsc#1245936 Cross-References: * CVE-2016-9840
* bsc#1065729 * bsc#1156395 * bsc#1193629 * bsc#1194869 * bsc#1198410
Two issues have been found in libcaca, a colour ASCII art library. Both are related to heap buffer overflow, which might lead to memory corruption.
It was discovered that there was a potential null pointer dereference vulnerability in libetpan, an low-level library for handling email.
The audiofile library allows the processing of audio data to and from audio files of many common formats (currently AIFF, AIFF-C, WAVE, NeXT/Sun, BICS, and raw…
* bsc#1229007 Cross-References: * CVE-2024-7409
* bsc#1246664 Cross-References: * CVE-2025-8027 * CVE-2025-8028
Several security issues were fixed in CRaC JDK 21.
Update to 20250602 with fixes for CVE-2025-48964
An update that fixes two vulnerabilities is now available.
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language, which could result in server side request forgery or …
An update that fixes 8 vulnerabilities is now available.
An update that contains security fixes can now be installed.
An update that fixes three vulnerabilities is now available.
