Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The package dropbear before version 2025.88-1 is vulnerable to arbitrary command execution.
The package nodejs-lts-iron before version 20.19.2-1 is vulnerable to multiple issues including denial of service and access restriction bypass.
* bsc#1229504 * bsc#1233019 * bsc#1233678 * bsc#1234847
* bsc#1233019 * bsc#1233678 * bsc#1234847 Cross-References:
* bsc#1240897 Cross-References: * CVE-2025-3360
* bsc#1234847 Cross-References: * CVE-2024-53156
* bsc#1205495 * bsc#1230764 * bsc#1231103 * bsc#1231450 * bsc#1231910
* bsc#1242631 * bsc#1243177 Cross-References: * CVE-2025-3416
* bsc#1229504 * bsc#1233019 * bsc#1234847 Cross-References:
Security fix for CVE-2010-1028 and other security-relevant bugs; see https://github.com/bramstein/sfnt2woff-zopfli/pull/20/commits.
Security fix for CVE-2010-1028 and other security-relevant bugs; see https://github.com/bramstein/sfnt2woff-zopfli/pull/20/commits.
Fix for CVE-2025-47268
Update to version 12.5.2. Fixes CVE-2025-22247
Security fix for CVE-2010-1028 and other security-relevant bugs; see https://github.com/bramstein/sfnt2woff-zopfli/pull/20/commits.
Security fix for CVE-2010-1028 and other security-relevant bugs; see https://github.com/bramstein/sfnt2woff-zopfli/pull/20/commits.
* bsc#1242015 Cross-References: * CVE-2025-3891
* bsc#1242894 * bsc#1242899 Cross-References: * CVE-2025-32441
* bsc#1235438 Affected Products: * Basesystem Module 15-SP6 * Desktop Applications Module 15-SP6
.NET could be used to perform spoofing over a network.
* bsc#1228634 * bsc#1232533 * bsc#1241012 * bsc#1241045
grafana security update
Enable CSS Overscroll Behavior by default. Change threaded rendering implementation to use Skia API instead of WebCore display list that is not thread safe. Fi…
Microcode updates has been released for Intel(R) processors, addressing multiple potential vulnerabilties that may allow denial of service or information discl…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.
