Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1235231 Cross-References: * CVE-2024-56601
qt5-qtbase security update
This update addresses two string function vulnerabilities specific to POWER10 machines (CVE-2025-5702, CVE-2025-5745) and fixes a bug in TLS management when au…
Update to 7.9.1
FIx CVE-2025-6052.
Update to 7.9.1
FIx CVE-2025-6052.
Several security issues were fixed in Fig2dev.
* bsc#1227903 * bsc#1232908 * bsc#1232927 * bsc#1232929 * bsc#1233245
Nils Emmerich discovered several vulnerabilities in the Xorg X server, which may result in privilege escalation if the X server is running privileged.
The dns-root-data package contains DNS root zone data as published by IANA to be used as initial source by DNS software. This release adds the DNSKEY record fo…
Several security issues were fixed in GSS NTLMSSP.
Apache Log4j could be made to run programs as your login if it opened a specially crafted file.
* bsc#1244471 Affected Products: * Containers Module 15-SP6 * Containers Module 15-SP7
* bsc#1241067 * bsc#1243273 * bsc#1244032 * bsc#1244056 * bsc#1244059
* bsc#1234421 * bsc#1244405 * bsc#1244406 Cross-References:
* bsc#1243721 Cross-References: * CVE-2025-5222
Several security issues were fixed in Botan.
libblockdev security update
Update to 78.1.1, fixes CVE-2025-47273.
Update to 78.1.1, fixes CVE-2025-47273.
It was discovered that incorrect bounds validation in the GIF decoder of the GDK Pixbuf library may result in memory disclosure. For the stable distribution (b…
Update to 137.0.7151.119 * CVE-2025-6191: Integer overflow in V8 * CVE-2025-6192: Use after free in Profiler
Harden temporary private mounts (#2373301)
