Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
nginx could be made to expose sensitive information over the network.
* bsc#1248461 Cross-References: * CVE-2025-9301
* bsc#1182185 * bsc#1246989 Cross-References: * CVE-2021-3121
* bsc#1246318 * bsc#1246388 Cross-References: * CVE-2025-49125
An update that fixes two vulnerabilities is now available.
* bsc#1232234 * bsc#1246221 Cross-References: * CVE-2024-10041
* bsc#1232234 * bsc#1246221 Cross-References: * CVE-2024-10041
* bsc#1196654 * bsc#1211298 * bsc#1211798 * bsc#1211994 * bsc#1213326
Two vulnerabilities have been fixed in the IP bandwidth measuring tool iperf3. CVE-2025-54349
Vulnerabilities were found in unbound, a validating, recursive, and caching DNS resolver, which may lead to Denial of Service or cache poisoning.
An update that fixes one vulnerability is now available.
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. For the oldstable distribution (bookworm), thes…
Security fixes Bumped the minimum github.com/go-viper/mapstructure/v2 version to 2.3.0 for GHSA-fv92-fjc5-jj9h or GO-2025-3787 Bumped the minimum github.com/NV…
Update to release v1.32.7 Resolves: rhbz#2388412 Resolves: CVE-2025-5187: Nodes can delete themselves by adding an OwnerReference Upstream fixes
Update to release v1.31.12 Resolves: rhbz#2388412 Resolves: CVE-2025-5187: Nodes can delete themselves by adding an OwnerReference Upstream fix
Update to release v1.33.4 Resolves: rhbz#2388412 Fixes CVE-2025-5187: Nodes can delete themselves by adding an OwnerReference Upstream fixes
Update to release v1.31.12 Resolves: rhbz#2388412 Resolves: CVE-2025-5187: Nodes can delete themselves by adding an OwnerReference Upstream fix
Update to release v1.32.7 Resolves: rhbz#2388412 Resolves: CVE-2025-5187: Nodes can delete themselves by adding an OwnerReference Upstream fixes
It was discovered that there was a potential use after free vulnerability in mupdf, a lightweight PDF viewer. This could have allowed remote attackers to cause…
* bsc#1248006 Cross-References: * CVE-2025-55159
* bsc#1248006 Cross-References: * CVE-2025-55159
* bsc#1248006 Cross-References: * CVE-2025-55159
Several security issues were fixed in Python.
WEBrick could allow an HTTP request smuggling attack.
