The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1012628 * bsc#1139073 * bsc#1204142 * bsc#1210025 * bsc#1211226
* bsc#1244485 * bsc#1246118 * bsc#1247719 * bsc#1247720
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-6558
Several security issues were fixed in Tomcat.
Several security issues were fixed in libssh.
Updated to new upstream release (142.0)
Rebase due to a lot of CVE fixes
* bsc#1244337 * bsc#1247350 * bsc#1247351 Cross-References:
Several security issues were fixed in WebKitGTK.
* bsc#1240414 Cross-References: * CVE-2025-31115
* bsc#1242666 * bsc#1243428 Cross-References: * CVE-2025-3416
* bsc#1246077 * bsc#1246078 * bsc#1246079 Cross-References:
Two vunlerabilities were found in libxslt, the XSLT 1.0 processing library, which may lead to information disclosure and DoS attack. CVE-2023-40403
Update to 1.26.3.
Update to 1.26.3.
Update to 1.26.3.
Update to 1.26.3.
Update uv to version 0.8.8. Update the h2 crate to version 0.4.12. The builds in this update also address CVE-2025-54368.
Update to 1.26.3.
Update to 1.26.3.
Update to 1.26.3.
Update to 1.26.3.
Update uv to version 0.8.8. Update the h2 crate to version 0.4.12. The builds in this update also address CVE-2025-54368.
Update uv to version 0.8.8. Update the h2 crate to version 0.4.12. The builds in this update also address CVE-2025-54368.