41740 matches found
Astra Linux – Vulnerability in edk2
EDK2 contains a vulnerability in the BIOS, where an attacker can cause a “Protection Mechanism Failure” through local access. Successful exploitation of this vulnerability will lead to the execution of arbitrary code, compromising Confidentiality, Integrity, and Availability...
Astra Linux – Vulnerability in PHP 8.2
In PHP versions 8.1. before 8.1.33, 8.2. before 8.2.29, 8.3. before 8.3.23, and 8.4. before 8.4.10, when parsing XML data in SOAP extensions, overly large 2Gb XML namespace prefixes may lead to null pointer dereferencing. This can result in crashes and affect the availability of the target server...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: In the net subsystem, hsr: rejecting HSR frames if skb cannot hold the tag. Receiving an HSR frame with insufficient space to hold the HSR tag in the skb can result in a crash kernel bug. 45.390915 skbuff: skbunderpanic:...
java-25-openj9-25.0.1.0-1.1 on GA media (moderate)
java-25-openj9-25.0.1.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15694-1 Rating: moderate Cross-References: CVE-2025-53057 CVE-2025-61748 CVSS scores: CVE-2025-53057 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2025-53057 SUSE : 8.2...
strongswan-6.0.3-1.1 on GA media (moderate)
strongswan-6.0.3-1.1 on GA media Announcement ID: openSUSE-SU-2025:15681-1 Rating: moderate Cross-References: CVE-2025-62291 CVSS scores: CVE-2025-62291 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now b...
AMD Graphics August 2025 Security Update
AMD has informed HP of potential vulnerabilities in some AMD Graphics components, which might lead to loss of confidentiality, loss of integrity, loss of availability, system crash, arbitrary writes, out of bounds read, or denial of service. AMD is releasing software updates to mitigate the...
The vulnerability of the nfs_lookupreply function in the net/nfs.c component of the U-Boot loader allows a hacker to gain access to confidential data, compromise its integrity, and cause service failure.
The vulnerability of the nfslookupreply function in the net/nfs.c component of the U-Boot loader is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
OPENSUSE-SU-2025:15693-1 java-21-openj9-21.0.9.0-1.1 on GA media
These are all security issues fixed in the java-21-openj9-21.0.9.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15691-1 java-17-openj9-17.0.17.0-1.1 on GA media
These are all security issues fixed in the java-17-openj9-17.0.17.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15689-1 gomuks-0.3.1-2.1 on GA media
These are all security issues fixed in the gomuks-0.3.1-2.1 package on the GA media of openSUSE Tumbleweed...
Moderate: Red Hat Security Advisory: Assisted Installer RHEL 8 components for Multicluster Engine for Kubernetes 2.9.1
Assisted installer RHEL 8 components for the multicluster engine for Kubernetes 2.9.1 General Availability release, with updates to container images. Assisted Installer RHEL 8 integrates components for the general multicluster engine for Kubernetes 2.9.1 release that simplify the process of...
OPENSUSE-SU-2025:15686-1 MozillaFirefox-144.0.2-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-144.0.2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15685-1 ImageMagick-7.1.2.8-1.1 on GA media
These are all security issues fixed in the ImageMagick-7.1.2.8-1.1 package on the GA media of openSUSE Tumbleweed...
SUSE CVE-2023-53702
In the Linux kernel, the following vulnerability has been resolved: s390/crypto: use vector instructions only if available for ChaCha20 Commit 349d03ffd5f6 "crypto: s390 - add crypto library interface for ChaCha20" added a library interface to the s390 specific ChaCha20 implementation. However no...
OPENSUSE-SU-2025:15675-1 coreboot-utils-25.09-2.1 on GA media
These are all security issues fixed in the coreboot-utils-25.09-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15680-1 ongres-scram-3.2-7.1 on GA media
These are all security issues fixed in the ongres-scram-3.2-7.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15681-1 strongswan-6.0.3-1.1 on GA media
These are all security issues fixed in the strongswan-6.0.3-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2025-59462
An attacker who tampers with the C++ CLI client may crash the UpdateService during file transfers, disrupting updates and availability...
The vulnerability of the KVM subsystem in the Linux operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the KVM virtualization subsystem in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...