The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1236217 * bsc#1245878 * bsc#1254430 * bsc#1254431
Unbundle plutovg from lunasvg, this avoids shipping a duplicate library with conflicting files. Update lunasvg to consume the plutovg version already available…
Unbundle plutovg from lunasvg, this avoids shipping a duplicate library with conflicting files. Update lunasvg to consume the plutovg version already available…
* bsc#1242882 * bsc#1245778 * bsc#1248672 * bsc#1249537
* bsc#1242882 * bsc#1248672 * bsc#1249537 Cross-References:
An update that solves one vulnerability can now be installed.
* bsc#1241772 * bsc#1250683 * bsc#1253181 * bsc#1253185 * bsc#1253186
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
Update to 2.9.7
An update that solves one vulnerability can now be installed.
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
* bsc#1065729 * bsc#1205128 * bsc#1206843 * bsc#1206893 * bsc#1207612
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-43392
Patch two newly-reported memory-safety bugs in stb_image: https://github.com/nothings/stb/issues/1860 https://github.com/nothings/stb/issues/1861
update to upstream 2.4.4, which fixed CVE-2025-64761 Adds hsm tag. The fedora-41 build was done with golang-1.24.10 which fixed CVE-2025-58189, CVE-2025-61725,…
32.0.2 release RHBZ#2416087 RHBZ#2415750 RHBZ#2415751 RHBZ#2415752 RHBZ#2415753
Update to 0.18.1
Update to 1.72.0
Update to 0.18.1
An update that solves 2 vulnerabilities can now be installed.
CISA added CVE-2021-26829 to its Known Exploited Vulnerabilities catalog after confirming that attackers are already using the ScadaBR stored XSS flaw in real …