The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1236878 Cross-References: * CVE-2024-12133
Rebase to 3.2.4, fix CVE-2024-12797
Prevent overflow when calculating ulog block size (CVE-2025-24528) Support PKCS11 EC client certs in PKINIT kdb5_util: fix DB entry flags on modification Add E…
* bsc#1236705 Cross-References: * CVE-2025-0938
* bsc#1228044 * bsc#1236282 Cross-References: * CVE-2025-0395
Threat hunters have shed light on a new campaign targeting the foreign ministry of an unnamed South American nation with bespoke malware capable of granting re…
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-24143
Security fix for CVE-2025-0938
Security fix for CVE-2025-0938
Security fix for CVE-2025-0938
Update to 133.0.6943.53 CVE-2025-0444: Use after free in Skia CVE-2025-0445: Use after free in V8 CVE-2025-0451: Inappropriate implementation in Extensions API
Update the openssl crate to version 0.10.70 and the openssl-sys crate to version 0.9.105. This includes a fix for RUSTSEC-2025-0004 / CVE-2025-0977 and rebuild…
* bsc#1229663 * bsc#1230998 * bsc#1231993 Cross-References:
* bsc#1229644 * bsc#1230998 * bsc#1231993 Cross-References:
* bsc#1229644 * bsc#1229663 * bsc#1230998 * bsc#1231993
* bsc#1227052 * bsc#1236507 Cross-References: * CVE-2023-45288
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-24143
Two vulnerabilities were discovered in pam-pkcs11, a PAM module which allows to use PKCS#11 based smart cards in the PAM authentication stack, which may allow …
* bsc#1229644 * bsc#1230998 * bsc#1231993 Cross-References:
* bsc#1229644 * bsc#1229663 * bsc#1230998 * bsc#1231993
* bsc#1230998 * bsc#1231993 Cross-References: * CVE-2024-45016
Update to 133.0.6943.53 CVE-2025-0444: Use after free in Skia CVE-2025-0445: Use after free in V8 CVE-2025-0451: Inappropriate implementation in Extensions API
Update to 9.16.33 (#2342784) Security Fixes: DNS-over-HTTPS flooding fixes. (CVE-2024-12705) Limit additional section processing for large RDATA sets. (CVE-202…
Update to 9.16.33 (#2342784) Security Fixes: DNS-over-HTTPS flooding fixes. (CVE-2024-12705) Limit additional section processing for large RDATA sets. (CVE-202…