The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1250410 Cross-References: * CVE-2025-9230
* bsc#1252282 Cross-References: * CVE-2025-62171
* bsc#1246818 Cross-References: * CVE-2025-7783
Xu Biang discovered a buffer overflow bug in the eap-mschapv2 plugin of strongSwan, an IKE/IPsec suite. The eap-mschapv2 plugin does not correctly check the le…
Several security vulnerabilities have been discovered in Wordpress, a popular content management framework. CVE-2024-6307
* bsc#1251941 Cross-References: * CVE-2025-62291
* bsc#1251958 * bsc#1251959 * bsc#1251960 Cross-References:
An update that solves three vulnerabilities can now be installed.
* bsc#1250908 * bsc#1251940 Cross-References: * CVE-2025-43718
tigervnc security update
Security fix for CVE-2025-58189, CVE-2025-61725
Update to Samba 4.22.6 - Security fix for CVE-2025-9640 and CVE-2025-10230
uv 0.9.5 https://github.com/astral-sh/uv/blob/0.9.5/CHANGELOG.md Since uv was built with astral-tokio-tar 0.5.6, this is a security fix for CVE-2025-62518. ruf…
uv 0.9.5 https://github.com/astral-sh/uv/blob/0.9.5/CHANGELOG.md Since uv was built with astral-tokio-tar 0.5.6, this is a security fix for CVE-2025-62518. ruf…
uv 0.9.5 https://github.com/astral-sh/uv/blob/0.9.5/CHANGELOG.md Since uv was built with astral-tokio-tar 0.5.6, this is a security fix for CVE-2025-62518. ruf…
uv 0.9.5 https://github.com/astral-sh/uv/blob/0.9.5/CHANGELOG.md Since uv was built with astral-tokio-tar 0.5.6, this is a security fix for CVE-2025-62518. ruf…
uv 0.9.5 https://github.com/astral-sh/uv/blob/0.9.5/CHANGELOG.md Since uv was built with astral-tokio-tar 0.5.6, this is a security fix for CVE-2025-62518. ruf…
Multiple vulnerabilities were found in ruby-rack, a modular Ruby webserver interface, as follows: - CVE-2025-32441: Rack session can be restored after deletion.
An update that solves one vulnerability can now be installed.
An update that fixes two vulnerabilities is now available.
An update that fixes two vulnerabilities is now available.
Upgrade to Ruby 3.3.10. CVE-2025-58767 ruby: REXML denial of service (rhbz#2396203)
An update that solves 2 vulnerabilities can now be installed.
An update that solves 2 vulnerabilities can now be installed.