The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Eventlet could be made to bypass front-end security controls if it received a specially crafted request.
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
Update to 2.50.0: Improved rendering performance by recording each layer once and replaying every dirty region in different worker threads. Enable damage propa…
- Update to 140.0.7339.185 * CVE-2025-10585: Type Confusion in V8 * CVE-2025-10500: Use after free in Dawn * CVE-2025-10501: Use after free in WebRTC * CVE-202…
An update that solves 35 vulnerabilities, contains one feature and has four security fixes can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves four vulnerabilities can now be installed.
* bsc#1247581 * bsc#1247582 * bsc#1248117 * bsc#1248330
* bsc#1246001 * bsc#1246356 * bsc#1247499 Cross-References:
* bsc#1246001 * bsc#1247499 Cross-References: * CVE-2025-38181
An update that solves one vulnerability can now be installed.
* bsc#1233421 Cross-References: * CVE-2024-52615
* bsc#1233421 Cross-References: * CVE-2024-52615
* bsc#1233421 Cross-References: * CVE-2024-52615
An update that solves one vulnerability can now be installed.
* bsc#1231862 * bsc#1245685 * bsc#1245795 * bsc#1246001 * bsc#1246356
RabbitMQ Server could be made to expose sensitive information.
Kea DHCP could be made to crash if it received specially crafted network traffic.
An update that solves one vulnerability can now be installed.
An update that solves 17 vulnerabilities, contains one feature and has one security fix can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves two vulnerabilities can now be installed.
* bsc#1242618 * bsc#1243860 Cross-References: * CVE-2024-12224