OESA-2025-2080 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: A vulnerability was found in Linux Kernel up to 6.15.3 Operating System. It has been rated as problematic.Using CWE to declare the problem leads to CWE-252. The product does not check the return value from a method or function,...

OPENSUSE-SU-2025:15500-1 chromedriver-139.0.7258.154-1.1 on GA media

These are all security issues fixed in the chromedriver-139.0.7258.154-1.1 package on the GA media of openSUSE Tumbleweed...

Jupyter Remote Desktop Proxy Integer Overflow

The vulnerability of the software for remote access to the Jupyter Remote Desktop Proxy is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to influence the confidentiality, accessibility, and integrity of the protected information...

OPENSUSE-SU-2025:15501-1 libpcre2-16-0-10.46-1.1 on GA media

These are all security issues fixed in the libpcre2-16-0-10.46-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15499-1 kea-3.0.1-1.1 on GA media

These are all security issues fixed in the kea-3.0.1-1.1 package on the GA media of openSUSE Tumbleweed...

Linux Distros Unpatched Vulnerability : CVE-2021-3567

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Caribou due to a regression of CVE-2020-25712 fix. An attacker could use this flaw to bypass screen-locking applications that leverage Carib...

Linux Distros Unpatched Vulnerability : CVE-2024-45598

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cacti is an open source performance and fault management framework. Prior to 1.2.29, an administrator can change the Poller Standard Error Log Path parameter in...

Linux Distros Unpatched Vulnerability : CVE-2025-24031

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PAM-PKCS11 is a Linux-PAM login module that allows a X.509 certificate based user login. In versions 0.6.12 and prior, the pampkcs11 module segfaults when a use...

Linux Distros Unpatched Vulnerability : CVE-2021-20241

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in ImageMagick in coders/jp2.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the...

Linux Distros Unpatched Vulnerability : CVE-2020-27843

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in OpenJPEG in versions prior to 2.4.0. This flaw allows an attacker to provide specially crafted input to the conversion or encoding...

Linux Distros Unpatched Vulnerability : CVE-2021-20244

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in ImageMagick in MagickCore/visual-effects.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined...

Linux Distros Unpatched Vulnerability : CVE-2020-27824

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in OpenJPEG's encoder in the opjdwtcalcexplicitstepsizes function. This flaw allows an attacker who can supply crafted input to decomposition...

Mozilla Firefox JavaScript Engine Data Compromise

The vulnerability of the JavaScript Engine component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of...

ROS-20250827-09

Vulnerability in Mozilla Firefox, Firefox ESR and Thunderbird email client is related to an operation exceeding the memory buffer boundaries. operation outside of the memory buffer. Exploitation of the vulnerability could allow an attacker acting remotely to affect the confidentiality, integrity,...

Linux Distros Unpatched Vulnerability : CVE-2025-46399

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in fig2dev. This vulnerability allows availability via local input manipulation via gengeitpspline function. CVE-2025-46399 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2020-25651

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the SPICE file transfer protocol. File data from the host system can end up in full or in parts in the client connection of an illegitimate...

OPENSUSE-SU-2025:15496-1 python311-h2-4.3.0-1.1 on GA media

These are all security issues fixed in the python311-h2-4.3.0-1.1 package on the GA media of openSUSE Tumbleweed...

Multiple Open-Source Software Vulnerabilities in Hitachi Energy Asset Suite Product

SUMMARY Hitachi Energy is aware of multiple reported vulnerabilities that affect the Asset Suite product versions mentioned in this document below. If exploited these vulnerabilities can potentially impact on confidentiality, integrity and availability of the product. Please refer to the...

OPENSUSE-SU-2025:15494-1 libmozjs-128-0-128.14.0-1.1 on GA media

These are all security issues fixed in the libmozjs-128-0-128.14.0-1.1 package on the GA media of openSUSE Tumbleweed...

tomcat-9.0.108-1.1 on GA media (moderate)

tomcat-9.0.108-1.1 on GA media Announcement ID: openSUSE-SU-2025:15489-1 Rating: moderate Cross-References: CVE-2025-48989 CVSS scores: CVE-2025-48989 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-48989 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...