Here you find all IGEL Security Notices (ISNs). They inform you of any major vulnerabilities that have been found in IGEL software products and of how to fix or mitigate these. If you have questions or concerns about ISNs, you can contact the IGEL Security Team at security@igel.com. If you are an IGEL customer, please open a case on the IGEL Customer Portal.
Besides that, most IGEL software updates fix several minor vulnerabilities. You find information about these in the Release Notes that are published with each release.
Security Announcements Mailing List
To get new ISNs and ISN updates delivered to your inbox, subscribe to the Security Announcements Mailing List. Go to igel.com and find the "Subscribe for Updates" form at the bottom of the page.
This will initially subscribe you to all mailings from IGEL, but using the unsubscribe link at the bottom of a mail, you can select which communications you wish to receive and which not.
IGEL Security Notices (ISN)
-
ISN 2026-11: Firefox ESR Vulnerabilities -
ISN 2026-10: Chromium Vulnerabilities Exploited in the Wild -
ISN 2026-09: UMS Information Disclosure -
ISN 2026-08: Telnetd Vulnerabilities -
ISN 2026-07: AppArmor Vulnerabilities -
ISN 2026-06: Chromium Vulnerabilities Exploited in the Wild -
ISN 2026-05: Firefox ESR Vulnerabilities -
ISN 2026-04: Chromium Vulnerabilities Exploited in the Wild -
ISN 2026-03: OpenSSL Vulnerability -
ISN 2026-02: Chromium Vulnerabilities -
ISN 2026-01: X.Org Server Vulnerabilities -
ISN 2025-51: Chromium Vulnerabilities -
ISN 2025-50 Chromium Vulnerability Exploited in the Wild -
ISN 2025-49 Firefox ESR Vulnerabilities -
ISN 2025-48 Chromium Vulnerabilities -
ISN 2025-47: IGEL Citrix Workspace App Package Vulnerability -
ISN 2025-46: Webkit Vulnerability -
ISN 2025-45 LibTiff Vulnerability -
ISN 2025-44 Chromium Vulnerabilities -
ISN 2025-43: OpenSSL Vulnerability -
ISN 2025-42: ImageMagick Vulnerabilities -
ISN 2025-41: CUPS Vulnerability -
ISN 2025-39: Webkit Vulnerability -
ISN 2025-38: Critical Chromium Vulnerabilities CVE-2025-10200 & CVE-2025-10585 -
ISN 2025-37: Critical Chromium Vulnerability -
ISN 2025-36: Firefox ESR Vulnerabilities -
ISN 2025-35: JRE Vulnerabilities -
ISN 2025-34: Libarchive Vulnerability -
ISN 2025-33: Chromium Vulnerabilities -
ISN 2025-32: Webkit Vulnerabilities -
ISN 2025-31: XSS Vulnerabilities in UMS -
ISN 2025-30: Firefox ESR Vulnerabilities -
ISN 2025-29: Chromium Vulnerability in ANGLE Exploited in the Wild -
ISN 2025-26: Chromium Vulnerability Exploited in the Wild -
ISN 2025-25: Firefox ESR Vulnerability -
ISN 2025-24: Command Execution in IGEL OS -
ISN 2025-23: Chromium Vulnerability Exploited in the Wild -
ISN 2025-22: Statement on CVE-2025-47827 in IGEL OS 10 -
ISN 2025-21: Glibc Vulnerability -
ISN 2025-20: Critical Firefox ESR Vulnerabilities -
ISN 2025-19: Chromium Vulnerability Exploited in the Wild -
ISN 2025-18: Critical Libsoup Vulnerability -
ISN 2025-17: Vulnerabilities in NVIDIA Graphics Driver -
[CORRECTED] ISN 2025-16: Critical Vulnerability in Ppp -
ISN 2025-15: Perl Vulnerability -
ISN 2025-14: Critical IGEL OS Privilege Escalation -
ISN 2025-13: Chromium Critical Vulnerability -
ISN 2025-12: Chromium Critical Vulnerability -
ISN 2025-10: Linux Kernel Vulnerability -
ISN 2025-09: Firefox ESR Vulnerabilities -
ISN 2025-08: Libxml2 Vulnerabilities -
ISN 2025-07: X.org Vulnerabilities -
ISN 2025-06: Critical Webkit Vulnerability -
ISN 2025-05: HP Anyware Vulnerability -
ISN 2025-04: Microsoft Edge Vulnerabilities -
ISN 2025-03: Gstreamer Vulnerabilities -
ISN 2025-02: Chromium Vulnerabilities -
ISN 2025-01: Firefox ESR Vulnerabilities -
ISN 2024-24: Chromium Vulnerability -
ISN 2024-23: Webkit2GTK Critical Vulnerability -
ISN 2024-22: Firefox ESR Vulnerabilities -
ISN 2024-21: Chromium Critical Vulnerability -
ISN 2024-20: Chromium Vulnerabilities -
ISN 2024-19: CUPS Vulnerabilities -
ISN 2024-18: Critical Firefox ESR Vulnerability -
ISN 2024-17: OpenSSH Vulnerability -
ISN 2024-16: Libarchive Vulnerability -
ISN 2024-15: Libaom Vulnerability -
ISN 2024-14: Chromium Vulnerabilities -
ISN 2024-13: Firefox ESR Vulnerabilities -
ISN 2024-12: Vulnerability in Starter License Verification -
ISN 2024-11: Chromium Critical Vulnerability -
ISN 2024-10: Chromium Critical Vulnerability -
ISN 2024-09: Xdg-open “Open With” Vulnerability -
ISN 2024-08: Firefox ESR Vulnerabilities -
ISN 2024-07: Chromium Vulnerabilities -
ISN 2024-06: OS 11 Kernel Vulnerabilities -
ISN 2024-05: OS 12 Kernel Vulnerability -
ISN 2024-04: Libuv Vulnerability -
ISN 2024-03: Firefox ESR Vulnerabilities -
ISN 2024-02: X.org Vulnerabilities -
ISN 2024-01: Chromium Vulnerabilities -
ISN 2023-39: SSH Terrapin Vulnerability -
ISN 2023-38: X.org Vulnerabilities -
ISN 2023-36: BlueZ Vulnerability -
ISN 2023-35: GIMP Vulnerabilities -
ISN 2023-34: Perl Vulnerabilities -
ISN 2023-33: Zlib Vulnerability -
ISN 2023-32: Chromium Vulnerabilities -
ISN 2023-31: Webkit Vulnerabilities -
ISN 2023-30: Ffmpeg Vulnerabilities -
ISN 2023-29: Chromium Vulnerabilities -
ISN 2023-28: Firefox ESR Vulnerabilities -
ISN 2023-27: ActiveMQ in UMS HA -
ISN 2023-26: X.org Vulnerabilities -
ISN 2023-25: Webkit Vulnerabilities -
ISN 2023-24: Chromium Vulnerability -
ISN 2023-23: Curl Vulnerability -
ISN 2023-22: Multiple X11 Vulnerabilites -
ISN 2023-21: Libvpx Vulnerability in Chromium and Firefox -
ISN 2023-20: Firefox Libwebp Vulnerability -
ISN 2023-19: Libwebp Vulnerability in Chromium and Other Software -
ISN-2023-18: SnakeYAML Vulnerability -
ISN 2023-17: AMD Inception CPU Vulnerability -
ISN 2023-16: Intel Downfall CPU Vulnerability -
ISN 2023-15: ZenBleed Vulnerability -
ISN 2023-14: IGEL OS OpenSSH Vulnerability -
ISN 2023-13: IGEL OS Ghostscript Vulnerability -
ISN 2023-12: Citrix Secure Access Client -
ISN 2023-11: “StackRot” in IGEL OS Kernel -
ISN 2023-10: Log4j 1.x in IBM i Access Client -
ISN 2023-09: RCE in CUPS Printing System -
ISN 2023-08: Chromium Critical Vulnerability -
ISN 2023-07: Device Encryption Password Bug -
ISN 2023-06: UEFI Secure Boot Malware and IGEL OS -
ISN 2023-05: Chromium Local File Access -
ISN 2023-04: IGEL OS Local Privilege Escalation -
ISN 2023-03: Chromium Vulnerabilities -
ISN 2023-02: Firefox ESR Vulnerabilities -
ISN 2023-01: Citrix Workspace App Vulnerability -
ISN 2022-21: Chromium Vulnerability -
ISN 2022-20: Firefox ESR Vulnerabilities -
ISN 2022-19: Log4j 1.x Remainder in UMS -
ISN 2022-18: Linux Kernel Vulnerability -
ISN 2022-17: Chromium WebRTC Vulnerability -
ISN 2022-16: Firefox Vulnerabilities -
ISN 2022-15: Chromium Browser Vulnerabilities -
ISN 2022-14: Chromium Browser Vulnerabilities -
ISN 2022-13: UMS Vulnerabilities -
ISN 2022-12: Teradici PCoIP Library Vulnerabilities -
ISN 2022-11: VMware Horizon Privilege Escalation -
ISN 2022-10: Firefox Vulnerabilities -
ISN 2022-09: Zlib Vulnerability -
ISN 2022-08: Chromium JavaScript Vulnerability -
ISN 2022-07: Chromium Browser Vulnerabilities -
ISN 2022-06: OpenSSL Denial of Service -
ISN 2022-05: Netfilter Escalation of Privilege -
ISN 2022-04: Dirty Pipe Escalation of Privilege -
ISN 2022-03: Glibc Denial of Service in IGEL OS -
ISN 2022-02: UEFI Vulnerabilities in UD Devices -
ISN 2022-01: Polkit Escalation of Privilege -
ISN 2021-11: UMS Log4j Vulnerability -
ISN 2021-10: Chromium vulnerabilities -
ISN 2021-09: Firefox ESR vulnerabilities -
ISN 2021-08: ICG Authentication Vulnerability -
ISN 2021-07: UMS Web App Information Disclosure -
ISN 2021-06: IGEL OS OpenSSH Vulnerabilities -
ISN 2021-05: IGEL OS Denial of Service -
ISN 2021-04: IGEL OS Kernel Privilege Escalation -
ISN 2021-03: IGEL W10 Print Spooler Vulnerability -
ISN 2021-02: IGEL OS and W10 Wi-Fi Vulnerabilities (Fragattacks) -
ISN 2021-01: IGEL OS Remote Command Execution Vulnerability -
ISN 2020-10: IGEL OS Bluetooth Vulnerabilities -
ISN 2020-09: Command Execution from Start Menu -
ISN 2020-08: Firefox ESR Various Vulnerabilities -
ISN 2020-07: Firefox ESR Various Vulnerabilities -
ISN 2020-06: IGEL Cloud Gateway (ICG) Various Vulnerabilities -
ISN 2020-05: Intel Chipset Vulnerabilities -
ISN 2020-04: Firefox ESR Various Vulnerabilities -
ISN 2020-03: Firefox ESR Vulnerabilities -
ISN 2020-02: Windows CryptoAPI Spoofing Vulnerability -
ISN 2020-01: Firefox ESR Vulnerability -
ISN-2019-13: Windows Defender -
ISN-2019-12: Internet Explorer Vulnerability -
ISN 2019-11: Firefox ESR Vulnerabilities -
ISN 2019-10: Spectre SWAPGS CPU Vulnerability -
ISN 2019-09: IGEL OS SWP Vulnerability -
ISN 2019-08: Firefox ESR Vulnerabilities -
ISN 2019-07: Firefox ESR Vulnerability -
ISN 2019-06: IGEL OS Kernel Vulnerability -
ISN 2019-05: UMS HA Vulnerability -
ISN 2019-04: RDP Vulnerability in WES7 -
ISN 2019-03: Zombieload, RIDL, Fallout -
ISN 2019-02: UMS Vulnerability -
ISN 2019-01: UMS Vulnerability