The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Security fix for CVE-2025-47273
New version 2.6.3 (rhbz#2368989) Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803 kea.conf: Remove /tmp/ from socket-name for existing configurations ke…
Fixes CVE-2025-32873: Denial-of-service possibility in strip_tags() Fixes CVE-2025-48432: Potential log injection via unescaped request path
New version 2.6.3 (rhbz#2368989) Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803 kea.conf: Remove /tmp/ from socket-name for existing configurations ke…
Fixes CVE-2025-32873: Denial-of-service possibility in strip_tags() Fixes CVE-2025-48432: Potential log injection via unescaped request path
* bsc#1243226 * bsc#1244509 Cross-References: * CVE-2025-6018
Several security issues were fixed in Godot Engine.
* bsc#1241708 Cross-References: * CVE-2025-21605
Fixes CVE-2025-32873: Denial-of-service possibility in strip_tags() Fixes CVE-2025-48432: Potential log injection via unescaped request path
Rebuild for CVE-2024-12224, CVE-2025-4574
* bsc#1244039 Cross-References: * CVE-2024-47081
* jsc#MSQA-992 Cross-References: * CVE-2023-45288 * CVE-2024-11741
* bsc#1236516 * bsc#1238686 * jsc#MSQA-992 Cross-References:
dwarfutils could be made to crash or run programs as your login if it opened a specially crafted file.
It was discovered that there was a potential remote code execution vulnerability in konsole, the X terminal emulator of the KDE desktop environmne.t
The Qualys Threat Research Unit (TRU) discovered a local privilege escalation vulnerability in libblockdev, a library for manipulating block devices. An "allow…
* bsc#1236177 * bsc#1237496 * bsc#1241190 * bsc#1242938
* bsc#1236136 * bsc#1240366 Cross-References: * CVE-2024-13176
* bsc#1242631 Cross-References: * CVE-2025-3416
* bsc#1243123 Cross-References: * CVE-2024-28956 * CVE-2024-43420
podman security update
Fixes CVE-2025-32873: Denial-of-service possibility in strip_tags() Fixes CVE-2025-48432: Potential log injection via unescaped request path
Rebuild against idna 1.0+ for CVE-2024-12224
Rebuild for CVE-2024-12224, CVE-2025-4574