Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
GNU C Library could be made to crash or run programs if it processed specially crafted dynamically shared library.
* bsc#1243313 Cross-References: * CVE-2025-47273
* bsc#1243356 Cross-References: * CVE-2025-21490
* bsc#1242809 Cross-References: * CVE-2025-3887
A security issue was found in syslog-ng, an enhanced log daemon. In prior version, `tls_wildcard_match()` matches on certificates such as `foo.*.bar` although …
Latest upstream release. Changelog: https://github.com/gorhill/uBlock/releases/tag/1.64.0 . Fixes CVE-2025-4215 .
Update to version 22.15.1
Update to 20.19.2
Update to version 22.15.1
Update to upstream 2.1-49. 20250512 Addition of 06-ad-01/0x20 (GNR-AP/SP H0) microcode at revision 0xa0000d1; Addition of 06-ad-01/0x95 (GNR-AP/SP B0) microcod…
Update to 20.19.2
The package bind before version 9.20.9-1 is vulnerable to denial of service.
The package varnish before version 7.7.1-1 is vulnerable to content spoofing.
net-tools could be made to crash or run programs as your login if it opened a specially crafted input.
cifs-utils could be made to expose sensitive information.
PgBouncer is a lightweight connection pooler for PostgreSQL. CVE-2021-3539
Tomcat could expose sensitive files or run programs if it received specially crafted network traffic.
Flask could be made to sign sessions with stale keys.
* bsc#1243313 Cross-References: * CVE-2025-47273
* bsc#1243303 Cross-References: * CVE-2025-4918 * CVE-2025-4919
Several security issues were fixed in CRaC JDK 17.
Several security issues were fixed in Apache Tika.
* bsc#1243313 Cross-References: * CVE-2025-47273
* bsc#1242931 Cross-References: * CVE-2025-4207
