Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1241162 * bsc#1241214 * bsc#1241226 * bsc#1241238 * bsc#1241252
Samba could allow unintended access to network services.
* bsc#1234282 * bsc#1238043 * bsc#1243117 Cross-References:
* bsc#1238324 * bsc#1239077 Cross-References: * CVE-2022-49080
* bsc#1236701 * bsc#1239077 * bsc#1239096 Cross-References:
* bsc#1232900 * bsc#1236701 * bsc#1239077 * bsc#1239096
Several security issues were fixed in tomcat8, tomcat9, tomcat10.
Disallowing use of the arcfour-hmac(-md5) encryption type for session keys Add support for the PKINIT paChecksum2 sequence, required for Active Directory inter…
* bsc#1236217 * bsc#1242715 * bsc#1244156 * bsc#1244157 * bsc#1244158
* bsc#1229122 * bsc#1244156 * bsc#1244157 Cross-References:
* bsc#1238324 * bsc#1239077 Cross-References: * CVE-2022-49080
* bsc#1225947 * bsc#1230427 * bsc#1240379 * bsc#1240380 * bsc#1240381
* bsc#1242300 Cross-References: * CVE-2025-47268
* bsc#1239909 Cross-References: * CVE-2025-2588
systemd could be made to leak sensitive information.
USN-7545-1 introduced a regression in Apport.
A number of vulnerabilities were discovered in Django, a popular Python-based web-development framework: * CVE-2025-48432: Potential log injection via unescape…
Several security issues were fixed in AMD Microcode.
AMD Microcode could lose the SEV-based protection of a confidential guest.
Disallowing use of the arcfour-hmac(-md5) encryption type for session keys Add support for the PKINIT paChecksum2 sequence, required for Active Directory inter…
Kirill Firsov discovered that Roundcube, a skinnable AJAX based webmail solution for IMAP servers, was performing PHP Object deserialization on unvalidated inp…
Several vulnerabilities were discovered in modsecurity-apache, an Apache module to tighten the Web application security, which may result in denial of service …
Add patch for double free
Update to version 4.21.6
