The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1231562 * bsc#1231688 * bsc#1233852 * bsc#1244343 * bsc#1245288
Redis could be made to crash or run programs if it received specially crafted network traffic from an authenticated user.
* bsc#1250995 Cross-References: * CVE-2025-46817 * CVE-2025-46818
Update to 1.8.0.3 (rhbz#2307725) Resolves: CVE-2024-54661 (rhbz#2330520) Resolves: non-working ipv6-join-group option (rhbz#2352860) Resolves: FTBFS in Fedora …
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added two security flaws impacting SysAid IT support software to its Known Exploited Vulnerabi…
* bsc#1244663 Cross-References: * CVE-2025-4565
Update to 128.9.2 https://www.thunderbird.net/en-US/thunderbird/128.9.0esr/releasenotes/ https://www.thunderbird.net/en-US/thunderbird/128.9.1esr/releasenotes/…
Arbitrary file include in Carbon::setLocale has been fixed in Carbon, a PHP API extension for DateTime. For Debian 11 bullseye, this problem has been fixed in …