Collected every two hours from specialised publications — each link leads to the original article.
USN-6846-2 caused some regression in ansible.
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-24143
USN-7256-1 caused some minor regressions in Ruby
Update to 133.0.6943.53 CVE-2025-0444: Use after free in Skia CVE-2025-0445: Use after free in V8 CVE-2025-0451: Inappropriate implementation in Extensions API
Update the openssl crate to version 0.10.70 and the openssl-sys crate to version 0.9.105. This includes a fix for RUSTSEC-2025-0004 / CVE-2025-0977 and rebuild…
An issue was discovered in TCPDF before 6.8.0. setSVGStyles does not sanitize the SVG font-family attribute. (CVE-2024-56519) An issue was discovered in TCPDF …
* bsc#1229663 * bsc#1230998 * bsc#1231993 Cross-References:
* bsc#1229644 * bsc#1230998 * bsc#1231993 Cross-References:
* bsc#1229644 * bsc#1229663 * bsc#1230998 * bsc#1231993
* bsc#1227052 * bsc#1236507 Cross-References: * CVE-2023-45288
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-24143
Two vulnerabilities were discovered in pam-pkcs11, a PAM module which allows to use PKCS#11 based smart cards in the PAM authentication stack, which may allow …
* bsc#1229644 * bsc#1230998 * bsc#1231993 Cross-References:
* bsc#1229644 * bsc#1229663 * bsc#1230998 * bsc#1231993
BlueZ could be made to crash or run programs as your login if it received specially crafted Bluetooth requests.
* bsc#1230998 * bsc#1231993 Cross-References: * CVE-2024-45016
Remote Code Execution in pypa/setuptools. (CVE-2024-6345) References: - https://bugs.mageia.org/show_bug.cgi?id=33536 - https://lists.suse.com/pipermail/sle-up…
Mercurial configuration injectable in repo revision when installing via pip. (CVE-2023-5752) References: - https://bugs.mageia.org/show_bug.cgi?id=33542
Twisted.web has disordered HTTP pipeline response. (CVE-2023-46137) Twisted.web has disordered HTTP pipeline response. (CVE-2024-41671) HTML injection in HTTP …
Waitress has a request processing race condition in HTTP pipelining with an invalid first request. (CVE-2024-49768) Waitress has a denial of service leading to…
January CPU 2025
Update to 133.0.6943.53 CVE-2025-0444: Use after free in Skia CVE-2025-0445: Use after free in V8 CVE-2025-0451: Inappropriate implementation in Extensions API
* bsc#1236705 Cross-References: * CVE-2025-0938
* bsc#1231702 * bsc#1231711 * bsc#1231716 * bsc#1231719