OPENSUSE-SU-2025:15652-1 cargo-audit-advisory-db-20251021-1.1 on GA media

These are all security issues fixed in the cargo-audit-advisory-db-20251021-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15651-1 binutils-2.45-1.2 on GA media

These are all security issues fixed in the binutils-2.45-1.2 package on the GA media of openSUSE Tumbleweed...

The vulnerability of the TCP/IP protocol stack implementation in the real-time operating system FreeRTOS-Plus-TCP allows a attacker to compromise the confidentiality and accessibility of the protected information.

The vulnerability of the TCP/IP protocol stack implementation in the real-time operating system FreeRTOS-Plus-TCP lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and accessibility ...

JLSEC-2025-121 An issue was discovered in the FFmpeg package, where `vp3_decode_frame` in `libavcodec/vp3.c` lacks...

An issue was discovered in the FFmpeg package, where vp3decodeframe in libavcodec/vp3.c lacks check of the return value of avmalloc and will cause a null pointer dereference, impacting availability...

ctdb-4.22.5+git.431.dc5a539f124-1.1 on GA media (moderate)

ctdb-4.22.5+git.431.dc5a539f124-1.1 on GA media Announcement ID: openSUSE-SU-2025:15649-1 Rating: moderate Cross-References: CVE-2025-10230 CVE-2025-9640 CVSS scores: CVE-2025-10230 SUSE : 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVE-2025-9640 SUSE : 4.3...

OPENSUSE-SU-2025:15649-1 ctdb-4.22.5+git.431.dc5a539f124-1.1 on GA media

These are all security issues fixed in the ctdb-4.22.5+git.431.dc5a539f124-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15647-1 ollama-0.12.6-1.1 on GA media

These are all security issues fixed in the ollama-0.12.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15648-1 libpoppler-cpp2-25.09.1-2.1 on GA media

These are all security issues fixed in the libpoppler-cpp2-25.09.1-2.1 package on the GA media of openSUSE Tumbleweed...

JLSEC-2025-70 A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors...

A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the flaw could be used to crash the application. The highest...

JLSEC-2025-72 There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11

There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this...

CVE-2025-6894

An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in the API authorization logic of the affected device allows an authenticated, low-privileged user to execute the administrative ping function, which is restricted ...

EUVD-2025-34847

An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in the API authorization logic of the affected device allows an authenticated, low-privileged user to execute the administrative ping function, which is restricted ...

CVE-2025-6894

An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in the API authorization logic of the affected device allows an authenticated, low-privileged user to execute the administrative ping function, which is restricted ...

CVE-2025-6894

An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in the API authorization logic of the affected device allows an authenticated, low-privileged user to execute the administrative ping function, which is restricted ...

CVE-2025-6894

CVE-2025-6894 is a documented API authorization flaw in Moxa network security appliances/routers that allows a low-privileged, authenticated user to execute an administrative ping, potentially enabling internal network reconnaissance and limited impact to device confidentiality/availability. Rela...

OPENSUSE-SU-2025:15643-1 git-lfs-3.7.1-1.1 on GA media

These are all security issues fixed in the git-lfs-3.7.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15640-1 ffmpeg-4-4.4.6-9.1 on GA media

These are all security issues fixed in the ffmpeg-4-4.4.6-9.1 package on the GA media of openSUSE Tumbleweed...

The vulnerability of the SEV-SNP microprogramming software for AMD graphics processors, related to access control errors, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the SEV-SNP microprogramming software for AMD graphics processors is related to access control errors. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

CVE-2025-59184

Exposure of sensitive information to an unauthorized actor in Windows High Availability Services allows an authorized attacker to disclose information locally...

CVE-2025-42906

SAP Commerce Cloud contains a path traversal vulnerability that may allow users to access web applications such as the Administration Console from addresses where the Administration Console is not explicitly deployed. This could potentially bypass configured access restrictions, resulting in a lo...