The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Important: git-lfs security update
* bsc#1228165 * bsc#1234290 * bsc#1236705 Cross-References:
A security issue was discovered in the PostgreSQL database system. Under certain usage patterns, improper neutralization of quoting syntax could make it possib…
* bsc#1012628 * bsc#1194869 * bsc#1215199 * bsc#1216813 * bsc#1218470
* bsc#1236705 Cross-References: * CVE-2025-0938
* bsc#1218879 * bsc#1218880 * bsc#1218881 * bsc#1218882 * bsc#1218883
* bsc#1228044 * bsc#1236282 Cross-References: * CVE-2025-0395
USN-6846-2 caused some regression in ansible.
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-24143
USN-7256-1 caused some minor regressions in Ruby
Several security issues were fixed in digiKam.
Security fix for CVE-2025-0938
Security fix for CVE-2025-0938
Security fix for CVE-2025-0938
Update to 133.0.6943.53 CVE-2025-0444: Use after free in Skia CVE-2025-0445: Use after free in V8 CVE-2025-0451: Inappropriate implementation in Extensions API
Update the openssl crate to version 0.10.70 and the openssl-sys crate to version 0.9.105. This includes a fix for RUSTSEC-2025-0004 / CVE-2025-0977 and rebuild…
* bsc#1229663 * bsc#1230998 * bsc#1231993 Cross-References:
* bsc#1229644 * bsc#1230998 * bsc#1231993 Cross-References:
* bsc#1229644 * bsc#1229663 * bsc#1230998 * bsc#1231993
* bsc#1227052 * bsc#1236507 Cross-References: * CVE-2023-45288
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-24143
Two vulnerabilities were discovered in pam-pkcs11, a PAM module which allows to use PKCS#11 based smart cards in the PAM authentication stack, which may allow …
* bsc#1229644 * bsc#1230998 * bsc#1231993 Cross-References:
* bsc#1229644 * bsc#1229663 * bsc#1230998 * bsc#1231993