SUSE-SU-2025:03152-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2025-55004: Fixed heap buffer over-read in in ReadOneMNGIMage when processing images with separate alpha channels bsc1248076. - CVE-2025-55005: Fixed heap buffer overflow when transforming from Log to sRGB colorspaces bsc1248077. -...

The vulnerability of the GNOME graphical interface library libsoup, related to pointer assignment errors, allows a hacker to cause a service failure.

The vulnerability of the GNOME graphical interface library libsoup is related to pointer assignment errors. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2020-13649

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - parser/js/js-scanner.c in JerryScript 2.2.0 mishandles errors during certain out-of-memory conditions, as demonstrated by a scannerreverseinfolist NULL pointer...

Linux Distros Unpatched Vulnerability : CVE-2022-20499

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In validateForCommonR1andR2 of PasspointConfiguration.java, uncaught errors in parsing stored configs could lead to local persistent denial of service with no...

CVE-2025-58442 Saleor has user enumeration vulnerability due to different error messages

Saleor is an e-commerce platform. Starting in version 3.21.0 and prior to version 3.21.16, requesting certain fields in the response of accountRegister may result in errors that could unintentionally reveal whether a user with the provided email already exists in Saleor. Version 3.21.16 fixes the...

Google Android Information Disclosure Vulnerability (CNVD-2025-24499)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a letter disclosure vulnerability, which is caused by a logic error in multiple locations. An attacker can exploit the vulnerability to potentially cause a local information leak...

The vulnerability of the phpseclib cryptographic protocol library, related to errors in verifying the cryptographic signature, allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the phpseclib cryptographic protocol library is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

Google Android elevation of privilege vulnerability (CNVD-2025-23046)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that is caused by background activity that may be initiated as a result of logic errors in multiple functions of LocationProviderManager.java. An attacker...

The vulnerability of the Go programming language, related to synchronization errors when using a shared resource, allows attackers to cause service failures.

The vulnerability of the Go programming language is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failures...

Linux Distros Unpatched Vulnerability : CVE-2025-39726

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/ism: fix concurrency management in ismcmd The s390x ISM device data sheet clearly states that only one request-response sequence is allowable per ISM...

CVE-2025-39726

CVE-2025-39726 concerns the s390 Linux kernel ISM driver. The connected BDU entry notes that vulnerabilities in the functions ism_cmd() and ism_probe() in drivers/s390/net/ism_drv.c enable state management errors that can cause service failures. The initial description explains the root cause: th...

The vulnerability of the nfs_local_open_fh function in the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the nfslocalopenfh function in the Linux operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the mmap() function in the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the mmap function in Linux kernel is related to errors during link counter updates. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the netif_napi_del() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the netifnapidel function in the Linux operating system is related to state management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel, related to state management errors, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to state management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the __red_change() function in the Linux operating system’s kernel allows a hacker to execute arbitrary code.

The vulnerability of the redchange function in the Linux operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20250905-07

A vulnerability in the user locking mechanism of the Vault Enterprise and Vault Community Edition enterprise data archiving platforms is due to the application not performing the correct normalization of the application. Enterprise and Vault Community Edition is related to the fact that the...

The vulnerability of the l2cap_sock_resume_cb() function in the Linux kernel’s Bluetooth component, which allows a hacker to cause a service failure

The vulnerability of the l2capsockresumecb function in the Linux kernel’s Bluetooth component is related to errors that occur after freeing resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the pnfs_update_layout function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the pnfsupdatelayout function in the Linux operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failures...

Security update for redis

This update for redis fixes the following issues: CVE-2025-32023: Fixed out-of-bounds write when working with HyperLogLog commands can lead to remote code execution. bsc1246059 CVE-2025-48367: Fixed unauthenticated connection causing repeated IP protocol erros can lead to client starvation and Do...