The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
OpenJDK 11 could be made to expose sensitive information over the network.
USN-7096-1 caused some minor regressions in OpenJDK 8.
Rebuilt against golang-x-net 0.33.0 for CVE-2024-45338
This release contains a number of small improvements and bugfixes, including mitigations for the LOW severity vulnerability CVE-2025-24356. Bugfixes Add mitiga…
Update the OVN sources to upstream release v24.09.2
* bsc#1236136 Cross-References: * CVE-2024-13176
* bsc#1236518 Cross-References: * CVE-2023-45288
* bsc#1236460 Cross-References: * CVE-2022-49043
keepalived security update
Updated to 132.0.6834.159 * Medium CVE-2025-0762: Use after free in DevTools
Rebuilt against golang-x-net 0.33.0 for CVE-2024-45338
This release contains a number of small improvements and bugfixes, including mitigations for the LOW severity vulnerability CVE-2025-24356. Bugfixes Add mitiga…
Update the OVN sources to upstream release v24.09.2
An update that fixes one vulnerability is now available.
* bsc#1236460 Cross-References: * CVE-2022-49043
A vulnerability has been discovered in the OpenJDK Java runtime, which may result in authorisation bypass or information disclosure. For the stable distributio…
* bsc#1227769 Cross-References: * CVE-2024-39917
* bsc#1227769 Cross-References: * CVE-2024-39917
Several issues have been found in aiohttp, an asynchronous HTTP client/server framework for asyncio and Python. Those issues are related to the HTTP parser, li…
* bsc#1102840 * bsc#1103032 * bsc#1180296 * bsc#1202986 * bsc#1211594
* bsc#1102840 * bsc#1103032 * bsc#1180296 * bsc#1202986 * bsc#1211594
* bsc#1102840 * bsc#1103032 * bsc#1180296 * bsc#1202986 * bsc#1211594
* bsc#1236518 Cross-References: * CVE-2023-45288
* bsc#1236272 Cross-References: * CVE-2024-11218 * CVE-2024-9407