The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1241708 Cross-References: * CVE-2025-21605
Several vulnerabilities were discovered in xrdp, a Remote Desktop Protocol (RDP) server
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
* bsc#1242617 Cross-References: * CVE-2025-3416
* bsc#1236136 * bsc#1236771 Cross-References: * CVE-2024-13176
* bsc#1140031 * bsc#1196487 Cross-References: * CVE-2019-13147
Update to 1.9.9 to fix CVE-2025-30194
Update to 1.9.9 to fix CVE-2025-30194
* bsc#1230959 * bsc#1231748 * bsc#1232326 * bsc#1240366 * bsc#1240607
* bsc#1236217 * bsc#1242715 Cross-References: * CVE-2025-22873
open-vm-tools is a package that provides Open VMware Tools for virtual machines hosted on VMware. CVE-2025-22247
* bsc#1241678 Cross-References: * CVE-2024-10041
Update to 136.0.7103.92 CVE-2025-4372: Use after free in WebAudio
The package screen before version 5.0.0-3 is vulnerable to multiple issues including access restriction bypass, denial of service and privilege escalation.
* bsc#1242008 * bsc#1242009 Cross-References: * CVE-2025-31650
Fixes CVE-2025-47256 .
Fixes CVE-2025-47256 .
It was discovered that there was a potential buffer overflow vulnerability in libeconf, a configuration file parser. This could have been exploited via malicou…
Multiple vulnerabilities were found in rubygems, which contains a package management framework for Ruby and a dependency manager for Ruby applications. CVE-202…
* bsc#1239909 Cross-References: * CVE-2025-2588
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
Update to 136.0.7103.92 CVE-2025-4372: Use after free in WebAudio
Backport upstream fix for CVE-2025-43859