Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1234991 Cross-References: * CVE-2025-0237 * CVE-2025-0238
Update to 131.0.6778.264 * High CVE-2025-0291: Type Confusion in V8
Backport fix for CVE-2024-56378.
Update to 131.0.6778.264 * High CVE-2025-0291: Type Confusion in V8
Backport fix for CVE-2024-56378.
* bsc#1219494 * bsc#1226892 * bsc#1226897 * bsc#1226898 * bsc#1226899
* bsc#1234449 Cross-References: * CVE-2024-47606
* bsc#1234415 * bsc#1234447 * bsc#1234450 * bsc#1234455 * bsc#1234456
* bsc#1234449 Cross-References: * CVE-2024-47606
* bsc#1234415 * bsc#1234450 * bsc#1234453 * bsc#1234455 * bsc#1234456
golang-golang-x-net could be made to crash if it received specially crafted network traffic.
* bsc#1234851 Cross-References: * CVE-2024-40866 * CVE-2024-44185
* bsc#1235029 Cross-References: * CVE-2024-56826
* bsc#1232241 * bsc#1233307 Cross-References: * CVE-2024-11168
* bsc#1235029 Cross-References: * CVE-2024-56826
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
xfpt could be made to crash or run programs if it opened a specially crafted file.
Thunderbird could be made to bypass security restrictions.
Several security issues were fixed in Firefox.
Updated to latest upstream (134.0)
This update fixes issues with loading TGA and XCF files.
fix CVE-2024-46657 (rhbz#2331626)
Update to openjpeg-2.5.3 Fix 2 heap-buffer-overflow
update to 8.0.2 fixes CVE-2024-46981 - Lua script commands may lead to remote code execution fixes CVE-2024-51741 - Denial-of-service due to malformed ACL sele…
