The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that solves one vulnerability and has one bug fix can now be installed.
An update that solves 2 vulnerabilities and has 3 bug fixes can now be installed.
An update that solves 3 vulnerabilities and has 4 bug fixes can now be installed.
An update that solves 2 vulnerabilities and has 2 bug fixes can now be installed.
Several security issues were fixed in GNU binutils.
A local file inclusion vulnerability has been discovered in mistral- dashboard, the OpenStack Workflow as a Service dashboard plugin, that may result in disclo…
A local file inclusion vulnerability has been discovered in python- mistralclient, the OpenStack Workflow as a Service client, that may result in disclosure of…
Multiple vulnerabilities have been discovered in Pagure, a Git-centered code hosting system (forge).
A possible remote code execution (RCE) vulnerability has been discovered in pytorch, an open source machine learning framework.
Update to pgadmin-9.10
Update to 2.86.2 Fix CVE-2025-13601 or #YWH-PGM9867-134
Update to pgadmin-9.10
Yuxiao Wu, Yunyi Zhang, Baojun Liu and Haixin Duan discovered that the initial fix for CVE-2025-11411 as applied in DLA 4365-1 did not fully fix the vulnerabil…
It was discovered that missing validation of the device ID during handshakes in KDE Connect, a tool to integrate smart phones to a desktop, could allow an atta…
Version 0.18.1 Security Fixed critical issue where PKESK (public-key encrypted) session keys were generated as all-zero, allowing trivial decryption of message…
An update that solves 2 vulnerabilities can now be installed.
An update that solves 2 vulnerabilities can now be installed.
An update that solves 9 vulnerabilities can now be installed.
Update to 20251125: Revert "amdgpu: update GC 11.0.1 firmware" QCA: Add Bluetooth firmware for WCN685x uart interface qcom: Add ADSP firmware for qcs6490-thund…
Update to 4.19.0 Address CVEs by rebuilding with Go 1.24.10
A race condition was discovered in Qt, a cross-platform C++ application framework. Code to make security-relevant decisions about an established HTTP2 connecti…
Side-channel attacks sound abstract until you see how little an attacker actually needs. Instead of going after the crypto itself, they watch the system's phys…
* bsc#1249537 Cross-References: * CVE-2025-38616
* bsc#1253757 Cross-References: * CVE-2025-11563