The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Multiple security issues were discovered in TCPDF, a PHP class for generating PDF files on-the-fly, which may result in denial of service, cross-site scripting…
twitter-bootstrap3 a popular front end framework was affected by a vulnerability. A cross-site scripting (XSS) vulnerability
A vulnerability has been found in kitty, a fast, featureful, GPU based terminal emulator, which possible allows arbitrary code execution. CVE-2022-41322
Update to 128.11.0 https://www.thunderbird.net/en-US/thunderbird/128.11.0esr/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2025-46/
Fix for local information disclosure in systemd-coredump (CVE-2025-4598) Fixes for systemd itself, run0, systemd-networkd, "secure" pager, man pages, shell com…
Security vulnerabilities were found in symfony, a PHP framework for web and console applications and a set of reusable PHP components, which could lead to vali…
Several issues have been found in espeak-ng, a Multi-lingual software speech synthesizer. The issues are related to buffer overflow or underflow in several
Multiple security issues were discovered in Flask-CORS, a Flask extension for handling Cross Origin Resource Sharing (CORS). CVE-2024-1681
New upstream version (139.0)
This update contains the backported fix for CVE-2024-52804 (cookie parsing DoS vuln).
Update to 2025.88 (rhbz#2364904)
backport fix for CVE-2025-3887 (resolves rhbz#2367919)
This contains the backported fix for CVE-2024-52804 (cookie parsing DoS vuln)
* bsc#1234128 * bsc#1243317 Cross-References: * CVE-2025-4802
* bsc#1242931 Cross-References: * CVE-2025-4207
* bsc#1242931 Cross-References: * CVE-2025-4207
* bsc#1236596 * bsc#1236597 * bsc#1243361 Cross-References:
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. For the stable distribution (bookworm), these p…
* bsc#1243313 Cross-References: * CVE-2025-47273
* bsc#1242300 Cross-References: * CVE-2025-47268
* bsc#1242300 Cross-References: * CVE-2025-47268
Apport could be made to leak sensitive information.
* bsc#1243353 Cross-References: * CVE-2025-5263 * CVE-2025-5264
* bsc#1241274 * bsc#1241275 * bsc#1241276 * bsc#1242208 * bsc#1243429