Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to 136.0.7103.113 CVE-2025-4664: Insufficient policy enforcement in Loader CVE-2025-4609: Incorrect handle provided in unspecified circumstances in Mojo
Update to 1.25.0
Update to 136.0.7103.113 CVE-2025-4664: Insufficient policy enforcement in Loader CVE-2025-4609: Incorrect handle provided in unspecified circumstances in Mojo
Update to 1.25.0
Marcin Nowak discovered that dbclient(1) hostname arguments with a comma (for multihop) are passed to the shell which could result in running arbitrary shell c…
Several vulnerabilities were discovered in OpenAFS, an implementation of the AFS distributed filesystem, which may result in theft of credentials in Unix clien…
Enable CSS Overscroll Behavior by default. Change threaded rendering implementation to use Skia API instead of WebCore display list that is not thread safe. Fi…
x86: Indirect Target Selection [XSA-469, CVE-2024-28956]
update to 4.8.2 fixing CVE-2024-47619
update to 4.8.2 to fix CVE-2024-47619
* bsc#1241708 Cross-References: * CVE-2025-21605
Several vulnerabilities were discovered in xrdp, a Remote Desktop Protocol (RDP) server
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
* bsc#1242617 Cross-References: * CVE-2025-3416
* bsc#1236136 * bsc#1236771 Cross-References: * CVE-2024-13176
* bsc#1140031 * bsc#1196487 Cross-References: * CVE-2019-13147
* bsc#1218424 * bsc#1236045 * bsc#1236046 * bsc#1236801 * jsc#SLE-18320
Update to 1.9.9 to fix CVE-2025-30194
Update to 1.9.9 to fix CVE-2025-30194
It was discovered that insecure file handling in open-vm-tools, an open source implementation of VMware Tools, may allow an unprivileged local guest user to ta…
* bsc#1230959 * bsc#1231748 * bsc#1232326 * bsc#1240366 * bsc#1240607
* bsc#1236217 * bsc#1242715 Cross-References: * CVE-2025-22873
open-vm-tools is a package that provides Open VMware Tools for virtual machines hosted on VMware. CVE-2025-22247
Rack could be made to crash or allow unintended access to network services.
