Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to 1.59.0
An update that solves one vulnerability can now be installed.
Over the last decade, the volume of cyber threats has grown, but their shape has changed even more. Attacks no longer sit neatly inside a few predictable categ…
Version 1.0.21 This point release includes all the changes from 1.0.20-stable, which include a security fix for the crypto_core_ed25519_is_valid_point() functi…
An update that solves one vulnerability can now be installed.
A China-nexus threat actor known as UAT-7290 has been attributed to espionage-focused intrusions against entities in South Asia and Southeastern Europe.The act…
An update that solves four vulnerabilities can now be installed.
An update that solves six vulnerabilities can now be installed.
Changes with nginx 1.28.1 23 Dec 2025 *) Security: processing of a specially crafted login/password when using the "none" authentication method in the ngx_mail…
Changes with nginx 1.28.1 23 Dec 2025 *) Security: processing of a specially crafted login/password when using the "none" authentication method in the ngx_mail…
Update to 0.50.2
Update to 0.50.2
Privacy and security have never been more important—or more under threat. With headlines constantly reporting data breaches, hacks, and the unchecked collectio…
It was discovered that roundcube, a skinnable AJAX based webmail solution for IMAP servers, is prone to a cross-site scripting vulnerability via the animate ta…
PHP version 8.4.16 (18 Dec 2025) Core: Sync all boost.context files with release 1.86.0. (mvorisek) Fixed bug GH-20435 (SensitiveParameter doesn't work for nam…
An update that solves one vulnerability can now be installed.
* bsc#1252652 Cross-References: * CVE-2025-50949
* bsc#1248960 * bsc#1250621 Cross-References: * CVE-2025-11065
Several vulnerabilities were reported in the libpng PNG library, which could lead to information leaks, denial of service or potentially the execution of arbit…
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-13947 Janet Black discovered that a website may be able to exfiltrate …
Several security issues were fixed in radare2.
Suspicious emails rarely confess in the body. The clues live in headers, MIME parts, and tiny inconsistencies between what a message claims and what it actuall…
* bsc#1243503 * bsc#1247106 * bsc#1247108 * bsc#1247581 * bsc#1247582
* bsc#1243503 * bsc#1247106 * bsc#1247108 * bsc#1247581 * bsc#1247582
