The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Several security issues were fixed in libssh.
File::Find::Rule could be made to run programs if it opened a specially crafted file name.
* bsc#1240366 * jsc#PED-12895 Cross-References: * CVE-2025-27587
* bsc#1244705 Cross-References: * CVE-2025-6069
* bsc#1242844 Cross-References: * CVE-2025-4373
5.2.0 release
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. For the stable distribution (bookworm), these p…
* bsc#1238063 * bsc#1244136 Cross-References: * CVE-2025-0620
* bsc#1236931 * bsc#1239119 Cross-References: * CVE-2025-30258
* bsc#1244039 Cross-References: * CVE-2024-47081
* bsc#1244079 Cross-References: * CVE-2025-40909
* bsc#1244084 Cross-References: * CVE-2025-49176
* bsc#1244704 Cross-References: * CVE-2025-6196
Multiple vulnerabilities are discovered in jpeg-xl, the JPEG XL ("JXL") image coding library, including out of bounds read/write and stack based buffer overflo…
Backport fix for CVE-2025-6199.
Backport fix for CVE-2025-6199.
* bsc#1243721 Cross-References: * CVE-2025-5222
The embedded copy of pjproject is affected by a buffer overflow vulnerability, which affects applications that use PJSIP DNS resolver. For the stable distribut…
* bsc#1243314 Cross-References: * CVE-2025-4945
* bsc#1244704 Cross-References: * CVE-2025-6196
* bsc#1245054 * bsc#1245055 Cross-References: * CVE-2025-20234
* bsc#1244039 Cross-References: * CVE-2024-47081
* bsc#1244084 Cross-References: * CVE-2025-49176
* bsc#1230092 Cross-References: * CVE-2024-45310