Linux snd_soc_exit() Buffer Overflow DoS

The vulnerability of the sndsocexit function in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

OPENSUSE-SU-2025:15487-1 cheat-4.4.2-2.1 on GA media

These are all security issues fixed in the cheat-4.4.2-2.1 package on the GA media of openSUSE Tumbleweed...

ROS-20250825-06

A vulnerability in the Aggregate Term Handler component of the SQLite database management system is related to errors in the numeric truncation errors. Exploitation of the vulnerability could allow an attacker acting remotely to impact the confidentiality, integrity, and availability of the SQLit...

Linux l2cap_send_cmd() Data Compromise

The vulnerability of the l2capsendcmd function in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux retract_page_tables() Buffer Overflow

The vulnerability of the retractpagetables function in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

OPENSUSE-SU-2025:15488-1 tomcat-9.0.108-1.1 on GA media

These are all security issues fixed in the tomcat-9.0.108-1.1 package on the GA media of openSUSE Tumbleweed...

Linux blk_mq_alloc_request_hctx Heap Buffer Overflow DoS

The vulnerability of the blkmqallocrequesthctx function in the Linux operating system is related to unvalidated array indexing. Exploitation of this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux kernel Use-After-Free

The vulnerability of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux kernel Memory Reclamation DoS

The vulnerability of the Linux operating system’s kernel is related to a memory reallocation error. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

OPENSUSE-SU-2025:15491-1 ucode-intel-20250812-1.1 on GA media

These are all security issues fixed in the ucode-intel-20250812-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-38643

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Add missing lock in cfg80211checkandendcac Callers of wdevchandef must hold the wiphy mutex. But the worker cfg80211propagatecacdonewk never takes the lock. Which triggers the warning below with the...

terragrunt-0.85.1-1.1 on GA media (moderate)

terragrunt-0.85.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:15486-1 Rating: moderate Cross-References: CVE-2025-8959 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

libtiff-devel-32bit-4.7.0-8.1 on GA media (moderate)

libtiff-devel-32bit-4.7.0-8.1 on GA media Announcement ID: openSUSE-SU-2025:15487-1 Rating: moderate Cross-References: CVE-2024-13978 CVE-2025-8534 CVE-2025-9165 CVSS scores: CVE-2024-13978 SUSE : 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2024-13978 SUSE : 5.7...

AZL-71167 CVE-2025-38643 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Add missing lock in cfg80211checkandendcac Callers of wdevchandef must hold the wiphy mutex. But the worker cfg80211propagatecacdonewk never takes the lock. Which triggers the warning below with the...

CVE-2025-38648 spi: stm32: Check for cfg availability in stm32_spi_probe

In the Linux kernel, the following vulnerability has been resolved: spi: stm32: Check for cfg availability in stm32spiprobe The stm32spiprobe function now includes a check to ensure that the pointer returned by ofdevicegetmatchdata is not NULL before accessing its members. This resolves a warning...

CVE-2025-38643

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Add missing lock in cfg80211checkandendcac Callers of wdevchandef must hold the wiphy mutex. But the worker cfg80211propagatecacdonewk never takes the lock. Which triggers the warning below with the...

CVE-2025-38643

CVE-2025-38643 concerns the Linux kernel WiFi stack (cfg80211). The issue arises from a missing lock in cfg80211_check_and_end_cac(), requiring callers of wdev_chandef() to hold the wiphy mutex, while cfg80211_propagate_cac_done_wk() does not take the lock. This can trigger warnings like the mesh...

OESA-2025-2075 openjpeg2 security update

OpenJPEG is an open-source JPEG 2000 codec written in C language. It has been developed in order to promote the use of JPEG 2000, a still-image compression standard from the Joint Photographic Experts Group JPEG. Since April 2015, it is officially recognized by ISO/IEC and ITU-T as a JPEG 2000...

Security Bulletin: IBM App Connect Enterprise is vulnerable to Improper Encoding or Escaping of Output due to xmldom ( CVE-2021-32796 )

Summary IBM App Connect Enterprise is vulnerable to Improper Encoding or Escaping of Output due to xmldom. Vulnerability Details CVEID:CVE-2021-32796 DESCRIPTION: xmldom is an open source pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. xmldom versions...

ROS-20250822-18

A vulnerability in the 2D component of the Oracle Java SE software platform and Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines is related to insufficient input validation. and Oracle GraalVM Enterprise Edition virtual machines is related to insufficient input...