The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Backport fixes for CVE-2024-6174 and CVE-2024-11584 cloud-init included the systemd socket unit cloud-init-hotplugd.socket with default SocketMode that grants …
* bsc#1246855 Cross-References: * CVE-2025-54121
Perl could be made to target unintended paths when performing file operations.
This update fixes CVE-2025-8058, a low-impact security vulnerability in the regcomp function.
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in denial of service or server side…
SQLite could be made to crash or run programs if it received specially crafted input.
* bsc#1236621 * bsc#1243268 * bsc#1244561 * bsc#1244564 * bsc#1244565
* bsc#1245936 Cross-References: * CVE-2016-9840
Two issues have been found in libcaca, a colour ASCII art library. Both are related to heap buffer overflow, which might lead to memory corruption.
It was discovered that there was a potential null pointer dereference vulnerability in libetpan, an low-level library for handling email.
* bsc#1229007 Cross-References: * CVE-2024-7409
* bsc#1246664 Cross-References: * CVE-2025-8027 * CVE-2025-8028
Update to 20250602 with fixes for CVE-2025-48964
An update that fixes two vulnerabilities is now available.
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language, which could result in server side request forgery or …
An update that fixes 8 vulnerabilities is now available.
An update that fixes three vulnerabilities is now available.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. For the stable distribution (bookworm), these p…
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
An update that fixes four vulnerabilities is now available.
An update that fixes one vulnerability is now available.