The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to 136.0.7103.92 CVE-2025-4372: Use after free in WebAudio
Update to 47.7 notably fixing CVE-2025-3839
Fixes CVE-2025-47256 .
* bsc#1235670 Cross-References: * CVE-2025-23022
A vulnerability has been discovered in SimpleSAMLphp, a framework for authentication, primarily via the SAML protocol. CVE-2025-27773
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
* bsc#1224259 Cross-References: * CVE-2024-4853
* bsc#1242210 Cross-References: * CVE-2025-32873
* bsc#1240750 * bsc#1240752 * bsc#1240756 * bsc#1240757 * bsc#1241164
* bsc#1242008 * bsc#1242009 Cross-References: * CVE-2025-31650
A vulnerability has been discovered in mod_auth_openidc, an OpenID Certified authentication and authorization module for the Apache HTTP server that implements…
* bsc#1241678 Cross-References: * CVE-2024-10041
* bsc#1241678 Cross-References: * CVE-2024-10041
A vulnerability has been fixed in mod_auth_openidc, an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements …
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
* bsc#1240392 Cross-References: * CVE-2025-2704
* bsc#1241020 * bsc#1241078 * jsc#SLE-16032 Cross-References:
* bsc#1240897 Cross-References: * CVE-2025-3360
* bsc#1241658 * bsc#1241659 Cross-References: * CVE-2025-43965
The system could be made to crash or run programs as an administrator.
FastCGI could be made to crash or execute arbitrary code.
An update that fixes four vulnerabilities is now available.
Update to 136.0.7103.59 * CVE-2025-4096: Heap buffer overflow in HTML * CVE-2025-4050: Out of bounds memory access in DevTools * CVE-2025-4051: Insufficient da…