Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1151679 * bsc#1151680 * bsc#1151794 * bsc#1151927 * bsc#1210025
Several security issues were fixed in Git.
Several security issues were fixed in OnionShare.
* bsc#1243935 Cross-References: * CVE-2025-4598
* bsc#1242827 * bsc#1243935 Cross-References: * CVE-2025-4598
* bsc#1151679 * bsc#1151680 * bsc#1151794 * bsc#1151927 * bsc#1210025
USN-7010-1 introduced a regression in DCMTK
Sekou Diakite from HPE discovered a mistake with permission handling for Coordinators within the accounting system of Slurm Workload Manager, a cluster resourc…
* bsc#1227270 * bsc#1227271 * bsc#1227353 * bsc#1228097 * bsc#1233165
Several security issues were fixed in jQuery.
Antonio Morales discovered an out-of-bounds write in the MMRDecoder::scanruns method in djvulibre, a library and set of tools to handle documents in the DjVu f…
Several security issues were fixed in libssh.
File::Find::Rule could be made to run programs if it opened a specially crafted file name.
* bsc#1240366 * jsc#PED-12895 Cross-References: * CVE-2025-27587
* bsc#1244705 Cross-References: * CVE-2025-6069
* bsc#1242844 Cross-References: * CVE-2025-4373
* bsc#1243061 * bsc#1243804 * bsc#1243913 Cross-References:
5.2.0 release
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. For the stable distribution (bookworm), these p…
Update to 3.6.4 Release notes: https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.4
Update bundled pbkdf2 library.
* bsc#1245309 * bsc#1245310 * bsc#1245311 * bsc#1245314
* bsc#1238063 * bsc#1244136 Cross-References: * CVE-2025-0620
* bsc#1243314 * bsc#1243332 * bsc#1243422 * bsc#1243423
