The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Fix CVE-2025-12744
Update to libpng-1.6.51.
Update to libpng-1.6.51.
Several security issues were fixed in WebKitGTK.
Keane O'Kelley discovered several vulnerabilities in lasso, a library implementing Liberty Alliance and SAML protocols, which could result in denial of service…
Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitr…
Multiple vulnerabilties have been found in libpng, the official PNG reference library, allowing information disclosure via out-of-bounds read, denial of servic…
Fix seeking and looping of media elements that set the loop property. Fix several crashes and rendering issues. Fix CVE-2025-13947, CVE-2025-43458, CVE-2025-66…
Loading a manipulated TGA file in krita, an image manipulation program, could result in a heap-based buffer overflow in KisTgaImport.
Update to 143.0.7499.40 * High CVE-2025-13630: Type Confusion in V8 * High CVE-2025-13631: Inappropriate implementation in Google Updater * High CVE-2025-13632…
Fix CVE-2025-12744
Update to cef-142.0.17+g60aac24 & chromium 142.0.7444.175 (rhbz#2413981) High CVE-2025-13223: Type Confusion in V8 High CVE-2025-13224: Type Confusion in V8
Update to 143.0.7499.40 * High CVE-2025-13630: Type Confusion in V8 * High CVE-2025-13631: Inappropriate implementation in Google Updater * High CVE-2025-13632…
Fix CVE-2025-12744
An update that solves 7 vulnerabilities and has 7 bug fixes can now be installed.
An update that solves 2 vulnerabilities can now be installed.
An update that solves one vulnerability can now be installed.
Rebuilt with latest patched stb_image: memory-safety fixes
2.4.7 release, fixes CVE-2025-23016
Rebuilt against patched stb_image Initial build for F42
Rebuilt with latest patched stb_image: memory-safety fixes
Update to 4.06. Lots of bugfixes, but notably, security fixes for the following CVEs: CVE-2024-2971 CVE-2024-3247 CVE-2024-3248
An update that solves 196 vulnerabilities, contains 12 features and has 24 security fixes can now be installed.
It was discovered that incorrect handling of promiscuous NS RRSets in Unbound, a validating, recursive, caching DNS resolver, could result in cache poisoning. …