The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
podman security update
Update to 142.0.7444.162 * High CVE-2025-13042: Inappropriate implementation in V8
FVWM3 ver. 1.1.4
FVWM3 ver. 1.1.4
Libwebsockets (LWS) is a flexible, lightweight pure C library for implementing modern network protocols easily with a tiny footprint, using a nonblocking event…
FFmpeg could be made to crash if it opened a specially crafted file.
* bsc#1248960 * bsc#1250621 Cross-References: * CVE-2025-11065
An update that solves 173 vulnerabilities, contains two features and has 19 security fixes can now be installed.
An update that solves two vulnerabilities can now be installed.
* bsc#1251198 * bsc#1251199 Cross-References: * CVE-2025-61984
An update that solves two vulnerabilities can now be installed.
* bsc#1247850 * bsc#1249076 Cross-References: * CVE-2025-8732
lasso security update
Backport security fix for GHSA-wf5f-4jwr-ppcp / CVE-2025-64512
upgraded to 0.25.3 fixes open bugs, CVEs, etc
Backport security fix for GHSA-wf5f-4jwr-ppcp / CVE-2025-64512
FVWM3 ver. 1.1.4
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. For the oldstable distribution (bookworm), thes…
Update to 142.0.7444.162 * High CVE-2025-13042: Inappropriate implementation in V8
Update to 9.21.14 (rhbz#2394406) Security Fixes: DNSSEC validation fails if matching but invalid DNSKEY is found. (CVE-2025-8677) Address various spoofing atta…
New upstream release v10 Fix: CVE-2025-11568
Update to 9.21.14 (rhbz#2394406) Security Fixes: DNSSEC validation fails if matching but invalid DNSKEY is found. (CVE-2025-8677) Address various spoofing atta…
New upstream release v10 Fix: CVE-2025-11568
Keane O'Kelley discovered several vulnerabilities in lasso, a library implementing Liberty Alliance and SAML protocols, which could result in denial of service…