The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1140031 * bsc#1196487 Cross-References: * CVE-2019-13147
* bsc#1238043 * bsc#1243117 Cross-References: * CVE-2024-28956
* bsc#1245309 * bsc#1245310 * bsc#1245311 * bsc#1245314
* bsc#1245309 * bsc#1245310 * bsc#1245311 * bsc#1245314
* bsc#1242722 * bsc#1243815 * bsc#1244649 * bsc#1244656
* bsc#1245309 * bsc#1245310 * bsc#1245311 * bsc#1245314
Update to 138.0.7204.92 * High CVE-2025-6554: Type Confusion in V8
* bsc#1065729 * bsc#1156395 * bsc#1193629 * bsc#1194869 * bsc#1198410
* bsc#1244081 Cross-References: * CVE-2025-5601
* bsc#1244081 Cross-References: * CVE-2025-5601
* bsc#1243902 Cross-References: * CVE-2025-40908
It was discovered that there was a so-called "link following" vulnerability in sslh, a protocol multiplexor often used to share SSH and HTTPS on the same port.
* bsc#1236136 Cross-References: * CVE-2024-13176
* bsc#1241802 Cross-References: * CVE-2025-22872
* bsc#1236931 * bsc#1239119 Cross-References: * CVE-2025-30258
* bsc#1239749 Cross-References: * CVE-2024-40635
* bsc#1243313 Cross-References: * CVE-2025-47273
* bsc#1242631 Cross-References: * CVE-2025-3416
* bsc#1236931 * bsc#1239119 * bsc#1239817 Cross-References:
* bsc#1151679 * bsc#1151680 * bsc#1151794 * bsc#1151927 * bsc#1210025
Several security issues were fixed in Git.
* bsc#1243935 Cross-References: * CVE-2025-4598
* bsc#1242827 * bsc#1243935 Cross-References: * CVE-2025-4598
Antonio Morales discovered an out-of-bounds write in the MMRDecoder::scanruns method in djvulibre, a library and set of tools to handle documents in the DjVu f…