The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that solves 2 vulnerabilities can now be installed.
An update that solves 83 vulnerabilities can now be installed.
Django could be made to run programs if it received specially crafted network traffic.
An update that solves three vulnerabilities can now be installed.
An update that solves three vulnerabilities can now be installed.
An update that solves one vulnerability can now be installed.
* bsc#1248003 Cross-References: * CVE-2025-55159
* bsc#1250413 Cross-References: * CVE-2025-9900
Update to 142.0.7444.59 * High CVE-2025-12428: Type Confusion in V8 * High CVE-2025-12429: Inappropriate implementation in V8 * High CVE-2025-12430: Object lif…
add patch to remove dependency upper bound versions remove obsolete patches that updated upper bound versions clean up spec file formatting
uv / python-uv-build 0.9.5 https://github.com/astral-sh/uv/blob/0.9.5/CHANGELOG.md ruff 0.14.2 https://github.com/astral-sh/ruff/blob/0.14.2/CHANGELOG.md Pydan…
A buffer overflow was discovered in GIMP, the GNU Image Manipulation Program, which could result in denial of service or potentially the execution of arbitrary…
libssh could be made to crash.
Brief introduction CVE-2025-8677
Squid could be made to crash if it received specially crafted network traffic.
* bsc#1248631 * bsc#1249207 * bsc#1249208 Cross-References:
An update that solves three vulnerabilities can now be installed.
Several vulnerabilities have been fixed in DCMTK, a collection of libraries and applications implementing large parts of the DICOM standard for medical images.
GIMP, the GNU Image Manipulation Program, is vulnerable to a heap-based buffer overflow when parsing XWD files. This vulnerability allows remote attackers to e…
Geographiclib is a C++ library to solve geodesic problems. A stack buffer overflow occurs when the GeoConvert tool receives a crafted input. The overflow occur…
It was discovered that pure-ftpd, a secure and efficient FTP server, incorrectly verified the maximum file size in the quota mechanism, allowing adversaries to…
Multiple security issues were found in Rack, an interface for developing web applications in Ruby, which could result in denial of service or proxy bypass.
* bsc#1249847 Cross-References: * CVE-2022-50252
An update that solves one vulnerability can now be installed.