The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Vulnerabilities were found in unbound, a validating, recursive, and caching DNS resolver, which may lead to Denial of Service or cache poisoning.
An update that fixes one vulnerability is now available.
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. For the oldstable distribution (bookworm), thes…
Security fixes Bumped the minimum github.com/go-viper/mapstructure/v2 version to 2.3.0 for GHSA-fv92-fjc5-jj9h or GO-2025-3787 Bumped the minimum github.com/NV…
Update to release v1.32.7 Resolves: rhbz#2388412 Resolves: CVE-2025-5187: Nodes can delete themselves by adding an OwnerReference Upstream fixes
Update to release v1.31.12 Resolves: rhbz#2388412 Resolves: CVE-2025-5187: Nodes can delete themselves by adding an OwnerReference Upstream fix
Update to release v1.33.4 Resolves: rhbz#2388412 Fixes CVE-2025-5187: Nodes can delete themselves by adding an OwnerReference Upstream fixes
Update to release v1.31.12 Resolves: rhbz#2388412 Resolves: CVE-2025-5187: Nodes can delete themselves by adding an OwnerReference Upstream fix
Update to release v1.32.7 Resolves: rhbz#2388412 Resolves: CVE-2025-5187: Nodes can delete themselves by adding an OwnerReference Upstream fixes
It was discovered that there was a potential use after free vulnerability in mupdf, a lightweight PDF viewer. This could have allowed remote attackers to cause…
* bsc#1248006 Cross-References: * CVE-2025-55159
* bsc#1248006 Cross-References: * CVE-2025-55159
* bsc#1248006 Cross-References: * CVE-2025-55159
Several security issues were fixed in Python.
WEBrick could allow an HTTP request smuggling attack.
Two security issues were discovered in the Squid proxy caching server, which could result in the execution of arbitrary code, information disclosure or denial …
* bsc#1245227 * bsc#1246114 Cross-References: * CVE-2025-6199
* bsc#1244631 * bsc#1245218 * bsc#1245350 * bsc#1247350 * bsc#1247351
poppler could be made to denial of service if it received a specially crafted PDF file.
* bsc#1245218 * bsc#1247350 * bsc#1247351 Cross-References:
* bsc#1245218 * bsc#1245350 * bsc#1247350 * bsc#1247351
A security issues was discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
Several security issues were fixed in LibTIFF.
CVE-2025-53537: HIGH CVE-2025-53538: HIGH