Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
lua-http fix of CVE-2023-4540
31.0.5 release RHBZ#2364462 RHBZ#2366729 RHBZ#2366735
libvpx could be made to crash if it received specially crafted input.
Open VM Tools could be made to overwrite files as the administrator.
Several security issues were fixed in MariaDB.
Fix for local information disclosure in systemd-coredump (CVE-2025-4598) Various other fixes
Two security vulnerabilities have been discovered in Asterisk, an Open Source Private Branch Exchange. CVE-2025-47779
* bsc#1219340 * bsc#1230423 * bsc#1233323 * bsc#1233325 * bsc#1233326
Tornado could be made to consume excessive resources when processing specially crafted HTTP requests.
ADOdb could be made to crash or run programs if it received specially crafted input.
Twig could be made to expose sensitive information if it opened a specially crafted file.
* bsc#1214960 * bsc#1230092 Cross-References: * CVE-2024-45310
* bsc#1215199 * bsc#1223809 * bsc#1224013 * bsc#1224597 * bsc#1224757
* bsc#1215199 * bsc#1223809 * bsc#1224013 * bsc#1224597 * bsc#1224757
* bsc#1231284 Cross-References: * CVE-2024-8508
* bsc#1237367 * bsc#1239185 * bsc#1239322 * bsc#1239765 * jsc#PED-12534
* bsc#1234128 * bsc#1234665 * bsc#1239883 * bsc#1243317
* bsc#1241274 * bsc#1241275 * bsc#1241276 Cross-References:
* bsc#1241020 * bsc#1241078 * bsc#1241189 * jsc#SLE-16032
* bsc#1241274 * bsc#1241275 * bsc#1241276 * bsc#1242208 * bsc#1243429
* bsc#1243378 Cross-References: * CVE-2025-30193
Update to 137.0.7151.55 CVE-2025-5063: Use after free in Compositing CVE-2025-5280: Out of bounds write in V8 CVE-2025-5064: Inappropriate implementation in Ba…
Update to 137.0.7151.55 CVE-2025-5063: Use after free in Compositing CVE-2025-5280: Out of bounds write in V8 CVE-2025-5064: Inappropriate implementation in Ba…
Multiple vulnerabilities were discovered in Libreoffice, an office productivity software suite. CVE-2025-1080
