The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
kernel security update
* bsc#1230028 * bsc#1247207 Cross-References: * CVE-2024-58266
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
* bsc#1243314 Cross-References: * CVE-2025-4945
An update that fixes one vulnerability is now available.
An update that fixes four vulnerabilities is now available.
An update that fixes four vulnerabilities is now available.
* bsc#1249011 Cross-References: * CVE-2025-58160
* bsc#1246623 * jsc#PED-13306 Cross-References: * CVE-2025-40918
CVE-2025-8067 Out-Of-Bounds Read in UDisks Daemon
An update that fixes one vulnerability is now available.
* bsc#1237093 Cross-References: * CVE-2025-1094
FFmpeg could be made to crash if it received specially crafted input.
A couple of vulnerabilities have been fixed in ClamAV, an anti-virus utility for Unix. CVE-2025-20128
* bsc#1246058 * bsc#1246059 Cross-References: * CVE-2025-32023
ERP systems don't make headlines, but they run the show.
Several security issues were fixed in RubyGems.
USN-7648-2 introduced a regression in PHP
Several security issues were fixed in Ruby.
Protocol Buffers could be made to crash if it received specially crafted input.
Exiv2 0.28.6 + patch to fix silent abi breakage Exiv2 v0.28.6 (Fixes two low severity CVEs)
Apply fix for CVE-2025-9300
Apply fix for CVE-2025-9300
* bsc#1236191 * bsc#1236658 * bsc#1236746 * bsc#1237308 * bsc#1237585