The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1213796 * bsc#1246575 * bsc#1246584 * bsc#1246595 * bsc#1246598
* bsc#1245776 * bsc#1245793 * bsc#1245797 Cross-References:
* bsc#1235250 * bsc#1245776 * bsc#1245793 * bsc#1245797
* bsc#1234675 * bsc#1235461 * bsc#1235871 Cross-References:
* bsc#1228645 * bsc#1235250 * bsc#1245771 * bsc#1245776 * bsc#1245793
* bsc#1245776 * bsc#1245793 * bsc#1245797 Cross-References:
* bsc#1235250 * bsc#1245776 * bsc#1245793 * bsc#1245797
* bsc#1245776 * bsc#1245793 * bsc#1245797 Cross-References:
ruby-graphql is GraphQL language and runtime for Ruby. It was discovered that loading a malicious schema definition in `GraphQL::Schema.from_introspection` (or…
Update to 138.0.7204.183 * CVE-2025-8292: Use after free in Media Stream
This update fixes CVE-2025-7345 and CVE-2025-6199.
This update fixes these CVEs: CVE-2025-32364 CVE-2025-32365 CVE-2024-56378
reposurgeon: update to 5.3 version
Stefan Buehler discovered a flaw in sope, the set of Objective-C frameworks powering SOGo, which may result in denial of service via a specially crafted POST r…
This update fixes these CVEs: CVE-2025-4948 CVE-2025-32908 CVE-2025-32907 CVE-2025-4969
Backports patch to fix non-CVE 2025-8224
* bsc#1241865 Cross-References: * CVE-2025-22872
The term "the internet never forgets" is loosely used, yet it is something more than that. Whatever you do on the internet leaves a silent trail called a digit…
* bsc#1206051 * bsc#1221829 * bsc#1233551 * bsc#1234480 * bsc#1234863
* bsc#1246232 * bsc#1246233 * bsc#1246267 * bsc#1246299
* bsc#1230360 Cross-References: * CVE-2024-45751
* bsc#1243855 Cross-References: * CVE-2024-12224
* bsc#1243868 Cross-References: * CVE-2024-12224
* bsc#1221107 Cross-References: * CVE-2024-2236