Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Fixes CVE-2025-32873: Denial-of-service possibility in strip_tags() Fixes CVE-2025-48432: Potential log injection via unescaped request path
* bsc#1243226 * bsc#1244509 Cross-References: * CVE-2025-6018
libblockdev could be made to run programs as an administrator.
Several security issues were fixed in Godot Engine.
PAM could be made to run programs as an administrator.
UDisks could be made to run programs as an administrator.
* bsc#1241708 Cross-References: * CVE-2025-21605
* bsc#1244082 * bsc#1244084 * bsc#1244087 * bsc#1244089 * bsc#1244090
UDisks could be made to run programs as an administrator.
libblockdev could be made to run programs as an administrator.
Fixes CVE-2025-32873: Denial-of-service possibility in strip_tags() Fixes CVE-2025-48432: Potential log injection via unescaped request path
Rebuild for CVE-2024-12224, CVE-2025-4574
* bsc#1154353 * bsc#1156395 * bsc#1170891 * bsc#1173139 * bsc#1184350
* bsc#1244039 Cross-References: * CVE-2024-47081
Several security issues were fixed in X.Org X Server.
* jsc#MSQA-992 Cross-References: * CVE-2023-45288 * CVE-2024-11741
* bsc#1208752 * bsc#1231844 * bsc#1233343 * bsc#1236510 * bsc#1236515
* bsc#1236516 * bsc#1238686 * jsc#MSQA-992 Cross-References:
* bsc#1208752 * bsc#1231844 * bsc#1233343 * bsc#1236510 * bsc#1236515
Several security issues were fixed in KaTeX.
dwarfutils could be made to crash or run programs as your login if it opened a specially crafted file.
Several security issues were fixed in MuJS.
It was discovered that there was a potential remote code execution vulnerability in konsole, the X terminal emulator of the KDE desktop environmne.t
The Qualys Threat Research Unit (TRU) discovered a local privilege escalation vulnerability in libblockdev, a library for manipulating block devices. An "allow…
