* bsc#1250410 Cross-References: * CVE-2025-9230

* bsc#1252282 Cross-References: * CVE-2025-62171

* bsc#1246818 Cross-References: * CVE-2025-7783

Xu Biang discovered a buffer overflow bug in the eap-mschapv2 plugin of strongSwan, an IKE/IPsec suite. The eap-mschapv2 plugin does not correctly check the length of an

Several security vulnerabilities have been discovered in WordPress, a popular content management framework. CVE-2024-6307

* bsc#1251941 Cross-References: * CVE-2025-62291

An update that fixes two vulnerabilities is now available.

An update that fixes two vulnerabilities is now available.

Upgrade to Ruby 3.3.10. CVE-2025-58767 ruby: REXML denial of service (rhbz#2396203)

New seamonkey packages are available for Slackware 15.0 and -current to fix security issues.

An update that solves 2 vulnerabilities can now be installed.

An update that solves 2 vulnerabilities can now be installed.

Update to xwayland 24.1.9, CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231

Update to upstream 2.4.3, including fixes for CVE-2025-62513 and CVE-2025-62705.

Rebuild for CVE-2025-47906. https://pkg.go.dev/vuln/GO-2025-3956

Fix CVE-2025-5455 – QtCore Assertion Failure Denial of Service

Fixes CVE-2025-11561 Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2402728 After startup SSSD already creates a Kerberos configuration snippet in /var/lib/sss/pubconf/krb5.include.d/localauth_plugin if the AD or IPA providers are used. This enables SSSD’s localauth plugin. Starting with this update the

New version 3.0.2 (rhbz#2407048) Fixes CVE-2025-11232 (rhbz#2407229)

* bsc#1242300 * bsc#1243284 Cross-References: * CVE-2025-47268

* bsc#1246019 * bsc#1248631 * bsc#1249207 * bsc#1249208

This upload fixes a few of security issues in the Python standard library included with PyPy, an alternative implementation of the Python 3 language. CVE-2024-6232

* bsc#1248631 * bsc#1249207 * bsc#1249208 Cross-References:

* bsc#1246019 * bsc#1248631 * bsc#1249207 * bsc#1249208

* bsc#1247737 * bsc#1248176 * bsc#1248631 * bsc#1249207 * bsc#1249208

The system could be made to expose sensitive information.

Netty could be made to send emails as your login if it received specially crafted input.

Several security issues were fixed in AMD Microcode.

Several security issues were fixed in GNU binutils.

Update to 9.18.41 (rhbz#2405786) Security fixes: DNSSEC validation fails if matching but invalid DNSKEY is found. (CVE-2025-8677) Address various spoofing attacks. (CVE-2025-40778) Cache-poisoning due to weak pseudo-random number generator. (CVE-2025-40780)

Update to 9.18.41 (rhbz#2405786) Security fixes: DNSSEC validation fails if matching but invalid DNSKEY is found. (CVE-2025-8677) Address various spoofing attacks. (CVE-2025-40778) Cache-poisoning due to weak pseudo-random number generator. (CVE-2025-40780)

Jan-Niklas Sohn discovered several vulnerabilities in the Xorg X server, which may result in privilege escalation if the X server is running privileged.

Jan-Niklas Sohn discovered several vulnerabilities in the Xorg X server, which may result in privilege escalation if the X server is running privileged.

MGASA-2025-0251 – Updated poppler packages fix security vulnerability

MGASA-2025-0250 – Updated tomcat packages fix security vulnerabilities

Multiple vulnerabilities have been found in python-authlib, a Python library for OAuth and OpenID Connect servers.

Update to latest version (#2404637) Fix CVE-2025-47910, CVE-2025-47906, CVE-2025-26625

* bsc#1251941 Cross-References: * CVE-2025-62291

* bsc#1246806 * bsc#1252414 * bsc#1252417 Cross-References:

The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-43272 Big Bear discovered that processing maliciously crafted web content may lead to an unexpected process crash.