The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1248119 * bsc#1248120 * bsc#1248122 Cross-References:
* bsc#1246790 Cross-References: * CVE-2025-7700
* bsc#1248143 Cross-References: * CVE-2025-54989
* bsc#1243895 Cross-References: * CVE-2025-48989
fix CVE-2025-9165: memory leak in tiffcmp (rhbz#2389608)
Update to upstream version 0.2.8 Update idna dependency to a version not affected by CVE-2024-12224
fix CVE-2025-8534: null pointer dereference in tiff2ps (rhbz#2386494) fix CVE-2024-13978: null pointer dereference in tiff2pdf (rhbz#2386201)
GNU binutils could be made to crash if it received a specially crafted input.
Several security issues were fixed in GStreamer Base Plugins.
An update that solves two vulnerabilities and has one errata is now available.
Updated to 139.0.7258.138 CVE-2025-9132: Out of bounds write in V8
Python 3.13.7 is the seventh maintenance release of 3.13. 3.13.7 is an expedited release to fix a significant issue with the 3.13.6 release: gh-137583: Regress…
Multiple vulnerabilities were found in luajit, a just in time compiler for the Lua programming language, which could lead to denial of service. CVE-2019-19391
An update that fixes one vulnerability is now available.
Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitr…
nginx could be made to expose sensitive information over the network.
* bsc#1248461 Cross-References: * CVE-2025-9301
* bsc#1182185 * bsc#1246989 Cross-References: * CVE-2021-3121
* bsc#1246318 * bsc#1246388 Cross-References: * CVE-2025-49125
An update that fixes two vulnerabilities is now available.
* bsc#1232234 * bsc#1246221 Cross-References: * CVE-2024-10041
* bsc#1232234 * bsc#1246221 Cross-References: * CVE-2024-10041
* bsc#1196654 * bsc#1211298 * bsc#1211798 * bsc#1211994 * bsc#1213326
Two vulnerabilities have been fixed in the IP bandwidth measuring tool iperf3. CVE-2025-54349