Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to 0.087, fixes CVE-2025-40914
Update to 0.35, fixes CVE-2024-2467
A buffer overflow was discovered in the International Components for Unicode (ICU) library. For the stable distribution (bookworm), this problem has been fixed…
* bsc#1227903 * bsc#1232908 * bsc#1232929 * bsc#1233680 * bsc#1233708
* bsc#1232908 * bsc#1232929 * bsc#1233680 * bsc#1233708 * bsc#1235062
pip could be made to expose sensitive information over the network.
libxslt could be made to expose sensitive information.
* bsc#1232908 * bsc#1232929 * bsc#1233680 * bsc#1233708 * bsc#1235062
* bsc#1238730 * bsc#1241331 Cross-References: * CVE-2022-49179
Several security vulnerabilities have been discovered in freeradius, a highly configurable RADIUS server.
Several security issues were fixed in libarchive.
* bsc#1243565 * bsc#1245054 * bsc#1245055 Cross-References:
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.
Updated to latest upstream (140.0)
xorg-x11-server CVE fix for CVE-2025-49175, CVE-2025-49176, CVE-2025-49177, CVE-2025-49178, CVE-2025-49179, CVE-2025-49180
Upgrade to libtpms 0.10.1 fixing CVE-2025-49133
urllib3 could be made to expose sensitive information over the network.
Brief introduction Multiple memory related vulnerabilities, inlcuding use-after-free,
* bsc#1227903 * bsc#1232908 * bsc#1232927 * bsc#1232929 * bsc#1233680
* bsc#1244148 Cross-References: * CVE-2011-10007
* bsc#1232929 * bsc#1233680 * bsc#1233708 * bsc#1235062 * bsc#1235231
Nils Emmerich discovered several vulnerabilities in the Xorg X server, which may result in privilege escalation if the X server is running privileged.
commons-beanutils, utility for manipulating Java beans have an improper Access Control vulnerability. A special BeanIntrospector class was added in version 1.9…
* bsc#1239192 Cross-References: * CVE-2025-22868
