The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Backport fix for CVE-2025.52885.
An update that fixes one vulnerability is now available.
An update that solves 3 vulnerabilities can now be installed.
* bsc#1252379 Cross-References: * CVE-2025-40778
* bsc#1252749 Cross-References: * CVE-2025-62594
An update that solves one vulnerability can now be installed.
* bsc#1248631 Cross-References: * CVE-2025-38664
An update that solves one vulnerability can now be installed.
The system could be made to expose sensitive information.
* bsc#1248004 Cross-References: * CVE-2025-55159
* bsc#1250413 Cross-References: * CVE-2025-9900
* bsc#1252414 * bsc#1252417 * bsc#1252418 * bsc#1252758
* bsc#1252414 * bsc#1252417 * bsc#1252418 * bsc#1252758
An update that solves three vulnerabilities and has one security fix can now be installed.
* bsc#1251194 Cross-References: * CVE-2025-61962
poppler could be made to crash if it opened a specially crafted file.
Update to xserver 21.1.20, CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231
CVE-2025-50949
Rebuild with the latest golang in repos
Update to xserver 21.1.20, CVE fix for: CVE-2025-62229, CVE-2025-62230, CVE-2025-62231
Yuxiao Wu, Yunyi Zhang, Baojun Liu and Haixin Duan discovered that unbound, a validating, recursive, and caching DNS resolver, was vulnerable to cache poisonin…
An update that solves 2 vulnerabilities can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.