Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1243123 Cross-References: * CVE-2024-28956 * CVE-2024-43420
* bsc#1243123 Cross-References: * CVE-2024-28956 * CVE-2024-43420
libfcgi-perl could be made to crash or execute arbitrary code.
* bsc#1243268 Cross-References: * CVE-2025-47287
Update to version 0.2.6.
Latest upstream release. Changelog: https://github.com/gorhill/uBlock/releases/tag/1.64.0 . Fixes CVE-2025-4215 .
Update to version 0.2.6.
Bind could be made to crash if it received specially crafted network traffic.
Tomcat could expose sensitive files or run programs if it received specially crafted network traffic.
* bsc#1242931 Cross-References: * CVE-2025-4207
PostgreSQL could be made to crash if it received specially crafted network traffic.
* bsc#1215199 * bsc#1223809 * bsc#1224013 * bsc#1224597 * bsc#1224757
* bsc#1235958 * bsc#1235971 * bsc#1239651 * bsc#1242971 * jsc#PED-12028
* bsc#1242622 * jsc#PED-12028 Cross-References: * CVE-2025-3416
* bsc#1229504 * bsc#1233019 * bsc#1234847 Cross-References:
Update to 128.10.1 https://www.mozilla.org/en-US/security/advisories/mfsa2025-34/ https://www.thunderbird.net/en-US/thunderbird/128.10.1esr/releasenotes/
Fixes CVE-2025-32728
Fix CVE-2025-3155 - arbitrary file-read.
Fix CVE-2025-3155 - arbitrary file-read.
Mojolicious versions from 0.999922 through 9.39 for Perl uses a hard coded string, or the application's class name, as a HMAC session secret by default. Mojoli…
PostgreSQL could be made to crash if it received specially crafted network traffic.
The package go before version 2:1.24.3-1 is vulnerable to directory traversal.
The package freetype2 before version 2.13.3-3 is vulnerable to arbitrary code execution.
The package python-django before version 5.1.9-1 is vulnerable to denial of service.
