The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update gnutls to the latest upstream release, including a fix for CVE-2024-12243.
Includes CVE fixes.
Rebase to 3.2.4
Security fix for GHSA-f42g-r5jj-qh4j
* bsc#1236783 Cross-References: * CVE-2024-53104
Several security issues were fixed in libxml2.
Several security issues were fixed in X.Org X Server.
Several security issues were fixed in proftpd-dfsg.
As we connect almost every element of our homes to the Internet of Things (IoT), security concerns have spread far beyond traditional computing devices to ever…
The system could be made to crash or run programs as an administrator.
* bsc#1237058 * bsc#1237062 Cross-References: * CVE-2025-24031
* bsc#1227320 * bsc#1227371 * bsc#1228585 * bsc#1236783
Node.js a JavaScript runtime environment was affected by a vulnerability. A memory leak could occur when a remote peer abruptly closes the socket without sendi…
* bsc#1227320 * bsc#1227371 * bsc#1228585 * bsc#1236783
* bsc#1236783 Cross-References: * CVE-2024-53104
* bsc#1227320 * bsc#1227371 * bsc#1228585 * bsc#1236783
* bsc#1236783 Cross-References: * CVE-2024-53104
* bsc#1227371 * bsc#1228585 * bsc#1236783 Cross-References:
libcap2 would allow unintended capabilities.
iniparser could be made to crash if it opened a specially crafted file.
* bsc#1237058 * bsc#1237062 Cross-References: * CVE-2025-24031
* bsc#1237058 * bsc#1237062 Cross-References: * CVE-2025-24031
* bsc#1236946 Cross-References: * CVE-2024-27856 * CVE-2024-54543
Several security issues were fixed in nginx.