Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1242015 Cross-References: * CVE-2025-3891
Several security issues were fixed in ModSecurity.
Two vulnerabilities have been fixed in cJSON, a C library for parsing JSON. CVE-2023-26819
Fix CVE-2025-49112 Fix CVE-2025-49112
Security update
New version 4.4.7 Ignoring potential error when using udevadm in %post scriptlet
Update to 137.0.7151.103 CVE-2025-5958: Use after free in Media CVE-2025-5959: Type Confusion in V8
Security update
New version 4.4.7 Ignoring potential error when using udevadm in %post scriptlet
This release includes improvements and fixes, and updates crossbeam-channel dependency to address CVE-2025-4574
This release includes improvements and fixes, and updates crossbeam-channel dependency to address CVE-2025-4574
This release includes improvements and fixes, and updates crossbeam-channel dependency to address CVE-2025-4574
This release includes improvements and fixes, and updates crossbeam-channel dependency to address CVE-2025-4574
Update to 3.12.11. gh-135034: [CVE 2024-12718] [CVE 2025-4138] [CVE 2025-4330] [CVE 2025-4435] [CVE 2025-4517] Fixes multiple issues that allowed tarfile extra…
The package python-django before version 5.1.11-1 is vulnerable to content spoofing.
The package konsole before version 25.04.2-1 is vulnerable to arbitrary code execution.
The package go before version 1.24.4-1 is vulnerable to multiple issues including certificate verification bypass and information disclosure.
The package samba before version 4.22.2-1 is vulnerable to access restriction bypass.
The package curl before version 8.14.1-1 is vulnerable to denial of service.
* bsc#1244035 Cross-References: * CVE-2025-22868 * CVE-2025-22869
* bsc#1244095 Cross-References: * CVE-2025-48432
* bsc#1242015 Cross-References: * CVE-2025-3891
* bsc#1235844 * bsc#1241274 * bsc#1241275 * bsc#1241276 * bsc#1243429
* bsc#1224280 Cross-References: * CVE-2024-28285
