OPENSUSE-SU-2025:15569-1 rke2-1.33-1.33.5+rke2r1-1.1 on GA media

These are all security issues fixed in the rke2-1.33-1.33.5+rke2r1-1.1 package on the GA media of openSUSE Tumbleweed...

OESA-2025-2300 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability ma...

PT-2025-55038

Уязвимость функции copy process модуля kernel/fork.c ядра операционной системы Linux связана с распределением ресурсов без ограничений и регулирования. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации...

The vulnerability of the kernel of iOS, iPadOS, tvOS, watchOS, visionOS, and macOS allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the kernel of iOS, iPadOS, tvOS, watchOS, visionOS, and macOS is related to the implementation of incorrect control flow. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...

OPENSUSE-SU-2025:15561-1 coredns-1.12.4-2.1 on GA media

These are all security issues fixed in the coredns-1.12.4-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15560-1 MozillaThunderbird-140.3.0-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-140.3.0-1.1 package on the GA media of openSUSE Tumbleweed...

mysql: Components Services unspecified vulnerability (CPU Apr 2025)

A flaw was found in the MySQL Server product of Oracle MySQL. This vulnerability allows a remote attacker to cause a denial of service DoS...

The vulnerability of the MMRDecoder::scanruns method in the viewing, creation, and editing of DjVu files provided by the DjVuLibre library allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the MMRDecoder::scanruns method in the viewing, creation, and editing of DjVu files in the DjVuLibre library is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

OPENSUSE-SU-2025:15557-1 autogen-5.18.16-8.1 on GA media

These are all security issues fixed in the autogen-5.18.16-8.1 package on the GA media of openSUSE Tumbleweed...

tkimg-2.1.0-1.1 on GA media (moderate)

tkimg-2.1.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15556-1 Rating: moderate Cross-References: CVE-2025-8851 CVE-2025-9165 CVSS scores: CVE-2025-8851 SUSE : 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CVE-2025-8851 SUSE : 4.8...

firefox-esr-140.3.0-1.1 on GA media (moderate)

firefox-esr-140.3.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15555-1 Rating: moderate Cross-References: CVE-2025-10527 CVE-2025-10528 CVE-2025-10529 CVE-2025-10532 CVE-2025-10533 CVE-2025-10536 CVE-2025-10537 Affected Products: openSUSE Tumbleweed An update that solves 7 vulnerabilities...

Mozilla -- mitigation bypass vulnerability

[email protected] reports: The vulnerability has been rated as having moderate impact, affecting both confidentiality and integrity with low severity, while having no impact on availability. For Thunderbird specifically, the vulnerability cannot be exploited through email as scripting is...

OPENSUSE-SU-2025:15556-1 tkimg-2.1.0-1.1 on GA media

These are all security issues fixed in the tkimg-2.1.0-1.1 package on the GA media of openSUSE Tumbleweed...

The vulnerability of the built-in software of the PLC Fastwel relates to the incorrect duration of a session, allowing an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the built-in software of the PLC Fastwel is related to an incorrect session duration. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

OPENSUSE-SU-2025:15555-1 firefox-esr-140.3.0-1.1 on GA media

These are all security issues fixed in the firefox-esr-140.3.0-1.1 package on the GA media of openSUSE Tumbleweed...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a lack of SIMD availability checking, which could lead to register corruption or miscalculated MACs...

Unspecified vulnerability in Xen (CNVD-2025-21331)

Xen is an open source virtual machine monitor product from Xen Open Source. The product enables different and incompatible operating systems to run on the same computer and supports migration at runtime to ensure uptime and avoid downtime. Xen has a security vulnerability that can be exploited by...

OPENSUSE-SU-2025:15553-1 kernel-devel-6.16.7-1.1 on GA media

These are all security issues fixed in the kernel-devel-6.16.7-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15552-1 cargo-packaging-1.3.0+0-2.1 on GA media

These are all security issues fixed in the cargo-packaging-1.3.0+0-2.1 package on the GA media of openSUSE Tumbleweed...

BIT-NIFI-2021-20190

A flaw was found in jackson-databind before 2.9.10.7. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...