Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1241658 * bsc#1241659 Cross-References: * CVE-2025-43965
* bsc#1243216 Cross-References: * CVE-2025-3875 * CVE-2025-3877
* bsc#1242809 Cross-References: * CVE-2025-3887
USN-7537-1 caused a regression in net-tools.
* bsc#1239902 Cross-References: * CVE-2024-58249
* bsc#1239902 Cross-References: * CVE-2024-58249
A client-side desync vulnerability can be triggered in Varnish, a high-performance web accelerator. An attacker can abuse a flaw in Varnish¢''s handling of chu…
A client-side desync vulnerability can be triggered in Varnish, a high-performance web accelerator. An attacker can abuse a flaw in Varnish¢''s handling of chu…
Twig is a template language for PHP. In a sandbox, an attacker can call `__toString()` on an object even if the `__toString()` method is not allowed by the sec…
Twig is a template language for PHP. In a sandbox, an attacker can call `__toString()` on an object even if the `__toString()` method is not allowed by the sec…
Tornado is a scalable, non-blocking Python web framework and asynchronous networking library. CVE-2025-47287
Tornado is a scalable, non-blocking Python web framework and asynchronous networking library. CVE-2025-47287
x86: Indirect Target Selection [XSA-469, CVE-2024-28956]
Several security issues were fixed in FFmpeg.
The update for net-tools announced in DSA 5923-1 introduced a regression for ifconfig always showing zero value packet counters. Updated packages are now avail…
It was discovered that a double-free in the encoder of libvpx, a multimedia library for the VP8 and VP9 video codecs, may result in denial of service and poten…
Setuptools could be made to write files to arbitrary locations on the filesystem.
A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to i…
A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to i…
* bsc#1242809 Cross-References: * CVE-2025-3887
* bsc#1243268 Cross-References: * CVE-2025-47287
* bsc#1242809 Cross-References: * CVE-2025-3887
* bsc#1229122 * bsc#1236045 * bsc#1236046 * bsc#1236801 * bsc#1238572
* bsc#1243268 Cross-References: * CVE-2025-47287
