Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
LibRaw could be made to crash if it received specially crafted input.
The system could be made to crash under certain conditions.
An update that fixes four vulnerabilities is now available.
Several security issues were fixed in OpenJDK 24.
Several security issues were fixed in OpenJDK 21.
Several security issues were fixed in OpenJDK 17.
Several security issues were fixed in OpenJDK 11.
Several security issues were fixed in OpenJDK 8.
Update to 136.0.7103.59 * CVE-2025-4096: Heap buffer overflow in HTML * CVE-2025-4050: Out of bounds memory access in DevTools * CVE-2025-4051: Insufficient da…
Update to git snapshot dffb773
Several security issues were fixed in MySQL.
Corosync could be made to crash if it received specially crafted network traffic.
c-ares could be made to crash if it received specially crafted network traffic.
* bsc#1223272 * bsc#1234028 * bsc#1235091 * bsc#1235092 * bsc#1236007
* bsc#1202828 * bsc#1217770 * bsc#1224413 * jsc#PED-11066 * jsc#PED-1174
* bsc#1202828 * bsc#1217770 * bsc#1224413 * jsc#PED-11066 * jsc#PED-1174
containerd is a container runtime. A bug was found in containerd where containers launched with a User set as a `UID:GID` larger than the maximum 32-bit signed…
Update to 136.0.7103.59 CVE-2025-4096: Heap buffer overflow in HTML CVE-2025-4050: Out of bounds memory access in DevTools CVE-2025-4051: Insufficient data val…
April 2025 CPU
A heap-based buffer overflow vulnerability was discovered in vips, an fast image processing library designed with efficiency in mind, which may result in denia…
Update to 136.0.7103.59 * CVE-2025-4096: Heap buffer overflow in HTML * CVE-2025-4050: Out of bounds memory access in DevTools * CVE-2025-4051: Insufficient da…
Update to 128.10.0 https://www.thunderbird.net/en-US/thunderbird/128.10.0esr/releasenotes/
Update to version 1.5.0 (for now, without PPS feature enabled due to potential correctness issues in the code). Release notes: https://github.com/pendulum-proj…
Update to version 0.24.4. Also contains fixes for RUSTSEC-2025-0006.
