The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to 128.11.1 https://www.mozilla.org/en-US/security/advisories/mfsa2025-49/
* bsc#1207948 * bsc#1215199 * bsc#1215211 * bsc#1218470 * bsc#1221651
Several security issues were fixed in AMD Microcode.
Add patch for double free
Backport fixes for CVE-2025-4476, CVE-2025-4948, CVE-2025-4969, CVE-2025-46420, CVE-2025-46421, CVE-2025-4945
Update to Samba 4.22.2 - Security fix for CVE-2025-0620
* bsc#1241274 * bsc#1241275 * bsc#1241276 Cross-References:
Twig could be made to expose sensitive information if it opened a specially crafted file.
Update to 128.11.0 https://www.thunderbird.net/en-US/thunderbird/128.11.0esr/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2025-46/
* bsc#1242931 Cross-References: * CVE-2025-4207
* bsc#1241083 Cross-References: * CVE-2024-56406
Update to 128.10.2 https://www.thunderbird.net/en-US/thunderbird/128.10.2esr/releasenotes/ Update to 128.10.1 https://www.mozilla.org/en-US/security/advisories…
Update to 128.10.1 https://www.mozilla.org/en-US/security/advisories/mfsa2025-34/ https://www.thunderbird.net/en-US/thunderbird/128.10.1esr/releasenotes/
xz 5.8.1
Moderate: libXpm security update
nodejs:20 enhancement update
nodejs:18 enhancement update
new module: postgresql:16
Several security issues were fixed in OpenJDK 17.
Valkey 8.0.3 - Released Wed 23 Apr 2025 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Bug fixes Op…
Update to 128.9.2 https://www.thunderbird.net/en-US/thunderbird/128.9.0esr/releasenotes/ https://www.thunderbird.net/en-US/thunderbird/128.9.1esr/releasenotes/…
Update to 1.24.1, fixes CVE-2025-2291.
Update to 128.9.2 https://www.thunderbird.net/en-US/thunderbird/128.9.1esr/releasenotes/ https://www.thunderbird.net/en-US/thunderbird/128.9.2esr/releasenotes/…
A vulnerability was discovered in MariaDB, a SQL database server compatible with MySQL. A privileged attacker could cause a Denial-of-Service (DoS) of the Mari…