Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1236177 * bsc#1237496 * bsc#1241190 * bsc#1242938
* bsc#1236136 * bsc#1240366 Cross-References: * CVE-2024-13176
* bsc#1242631 Cross-References: * CVE-2025-3416
* bsc#1220112 * bsc#1223096 * bsc#1226498 * bsc#1228557 * bsc#1228854
* bsc#1243123 Cross-References: * CVE-2024-28956 * CVE-2024-43420
* bsc#1244082 * bsc#1244084 * bsc#1244085 * bsc#1244087 * bsc#1244089
* bsc#1244082 * bsc#1244084 * bsc#1244085 * bsc#1244087 * bsc#1244089
* bsc#1244082 * bsc#1244084 * bsc#1244087 * bsc#1244089 * bsc#1244090
* bsc#1244082 * bsc#1244084 * bsc#1244087 * bsc#1244089 * bsc#1244090
* bsc#1223096 * bsc#1223809 * bsc#1224013 * bsc#1224597 * bsc#1224757
Django could be made to log injection if received specially crafted input.
podman security update
gimp security update
Update to 128.11.1 https://www.mozilla.org/en-US/security/advisories/mfsa2025-49/
Fixes CVE-2025-32873: Denial-of-service possibility in strip_tags() Fixes CVE-2025-48432: Potential log injection via unescaped request path
Rebuild against idna 1.0+ for CVE-2024-12224
Rebuild for CVE-2024-12224, CVE-2025-4574
Several security issues were fixed in Dojo.
Several security issues were fixed in Requests.
Django could be made to log injection if received specially crafted input.
* bsc#1241274 * bsc#1241275 * bsc#1241276 Cross-References:
* bsc#1220112 * bsc#1223096 * bsc#1226498 * bsc#1229491 * bsc#1230581
USN-7536-1 introduced a regression in cifs-utils.
* bsc#1215935 * bsc#1215936 * bsc#1233606 * bsc#1233608 * bsc#1233609
