Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Fix seeking and looping of media elements that set the loop property. Fix several crashes and rendering issues. Fix CVE-2025-13947, CVE-2025-43458, CVE-2025-66…
Loading a manipulated TGA file in krita, an image manipulation program, could result in a heap-based buffer overflow in KisTgaImport.
Update to 143.0.7499.40 * High CVE-2025-13630: Type Confusion in V8 * High CVE-2025-13631: Inappropriate implementation in Google Updater * High CVE-2025-13632…
Fix CVE-2025-12744
Update to cef-142.0.17+g60aac24 & chromium 142.0.7444.175 (rhbz#2413981) High CVE-2025-13223: Type Confusion in V8 High CVE-2025-13224: Type Confusion in V8
Update to 143.0.7499.40 * High CVE-2025-13630: Type Confusion in V8 * High CVE-2025-13631: Inappropriate implementation in Google Updater * High CVE-2025-13632…
Fix CVE-2025-12744
An update that solves 7 vulnerabilities and has 7 bug fixes can now be installed.
An update that solves 2 vulnerabilities can now be installed.
An update that solves one vulnerability can now be installed.
Rebuilt with latest patched stb_image: memory-safety fixes
2.4.7 release, fixes CVE-2025-23016
Rebuilt against patched stb_image Initial build for F42
Rebuilt with latest patched stb_image: memory-safety fixes
Update to 4.06. Lots of bugfixes, but notably, security fixes for the following CVEs: CVE-2024-2971 CVE-2024-3247 CVE-2024-3248
An update that solves 196 vulnerabilities, contains 12 features and has 24 security fixes can now be installed.
It was discovered that incorrect handling of promiscuous NS RRSets in Unbound, a validating, recursive, caching DNS resolver, could result in cache poisoning. …
An update that solves 13 vulnerabilities can now be installed.
An update that solves 26 vulnerabilities and has one bug fix can now be installed.
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-43392
Rebuilt with stb_image patched for two new security bugs.
Patch two newly-reported memory-safety bugs in stb_image: https://github.com/nothings/stb/issues/1860 https://github.com/nothings/stb/issues/1861
PySide6 6.10.1 update. Pyside6 6.10.1 release. Rebuilt with stb_image patched for two new security bugs.
Add upstream patch to fix CVE-2025-63938.
