The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Apache Commons BCEL could be made to crash or run programs if it received specially crafted network traffic.
libxml2 could be made to expose sensitive information over the network.
HarfBuzz could be made to crash or run programs as your login if it opened a specially crafted file.
poppler could be made to crash or expose sensitive information if it opened a specially crafted file.
Several security issues were fixed in .NET.
Audacity could expose sensitive information.
Several security issues were fixed in Python 2.7.
* bsc#1228693 Cross-References: * CVE-2024-40779
* bsc#1232637 * bsc#1233712 Cross-References: * CVE-2022-48956
* bsc#1210619 * bsc#1223363 * bsc#1223683 * bsc#1225013 * bsc#1225202
New version 3.4.0. Contains fixes for CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087, CVE-2024-12088, CVE-2024-12747.
Fix bookmarks restoring from file. Update to 2.53.20
Fix bookmarks restoring from file. Update to 2.53.20
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
An update that fixes one vulnerability is now available.
Several security issues were fixed in NeoMutt.
* bsc#1235600 * bsc#1235601 Cross-References: * CVE-2024-50349
* bsc#1214954 * bsc#1216813 * bsc#1220773 * bsc#1224095 * bsc#1224726
* bsc#1234100 * bsc#1234101 * bsc#1234102 * bsc#1234103 * bsc#1234104
* bsc#1223683 * bsc#1225099 * bsc#1225309 * bsc#1225310 * bsc#1225311
* bsc#1227471 * bsc#1228573 * bsc#1228786 * bsc#1229553 * bsc#1231353
* bsc#1232637 * bsc#1233712 Cross-References: * CVE-2022-48956
Redis 7.2.7 Released Mon 6 Jan 2025 12:30:00 IDT Upgrade urgency SECURITY: See security fixes below. Security fixes (CVE-2024-46981) Lua script commands may le…
Update to 0.30, fixes CVE-2025-22376