OPENSUSE-SU-2025:20049-1 Security update for tiff

This update for tiff fixes the following issues: tiff was updated to 4.7.1: Software configuration changes: Define HAVEJPEGTURBODUALMODE812 and LERCSTATIC in tifconfig.h. CMake: define WORDSBIGENDIAN via tifconfig.h doc/CMakeLists.txt: remove useless cmakeminimumrequired CMake: fix build with...

Important: Red Hat Bug Fix Advisory: OpenShift Container Platform 4.17.44 packages update

Red Hat OpenShift Container Platform release 4.17.44 is now available with updates to packages and images that fix several bugs. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This...

erlang27-27.1.3-1.1 on GA media (moderate)

erlang27-27.1.3-1.1 on GA media Announcement ID: openSUSE-SU-2025:15740-1 Rating: moderate Cross-References: CVE-2020-25623 CVE-2020-35733 CVE-2022-37026 CVE-2023-48795 CVE-2025-48041 CVSS scores: CVE-2022-37026 SUSE : 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L CVE-2023-48795 SUSE : 5.9...

SUSE SLES15: cluster-md-kmp-azure / dlm-kmp-azure / gfs2-kmp-azure / etc (SUSE-SU-2025:4128-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4128-1 advisory. The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to fix various security issues The following security issue...

AlmaLinux 9 : kernel (ALSA-2025:20518)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:20518 advisory. kernel: can: isotp: fix potential CAN frame reception race in isotprcv CVE-2022-48830 kernel: soc: qcom: cmd-db: Map shared memory as WC, not WB...

SUSE SLES12 Security Update : kernel (Live Patch 61 for SUSE Linux Enterprise 12 SP5) (SUSE-SU-2025:4123-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4123-1 advisory. This update for the SUSE Linux Enterprise kernel 4.12.14-122.231 fixes various security issues The following security issues were fixed: -...

[slackware-security] libarchive

New libarchive packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libarchive-3.8.3-i586-1slack15.0.txz: Upgraded. This update contains security fixes and improvements: lib: Create temporary files ...

CVE-2025-64342

ESF-IDF is the Espressif Internet of Things IOT Development Framework. When the ESP32 is in advertising mode, if it receives a connection request containing an invalid Access Address AA of 0x00000000 or 0xFFFFFFFF, advertising may stop unexpectedly. In this case, the controller may incorrectly...

Important: Red Hat Bug Fix Advisory: OpenShift Container Platform 4.20.4 bug fix update

Red Hat OpenShift Container Platform release 4.20.4 is now available with updates to packages and images that fix several bugs. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.20 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.20 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.20 security, enhancement & bug fix update...

SUSE-RU-2025:21046-1 Recommended update for afterburn

This update for afterburn fixes the following issues: - Update to version 5.9.0.git21.a73f509: docs/release-notes: update for release 5.10.0 cargo: update dependencies microsoft/azure: Add XML attribute alias for serde-xml-rs Fedora compat docs/release-notes: Add entry for Azure SharedConfig XML...

Vulnerabilities fixed in GitLab

GitLab has fixed vulnerabilities in GitLab CE/EE versions for 18.3.6, 18.4.4, and 18.5.2. The vulnerabilities include the ability for attackers to remove Duo authentication flows, access sensitive information via GraphQL subscriptions, and bypass access controls on GitLab Pages. These...

OPENSUSE-SU-2025:15742-1 python312-3.12.12-2.1 on GA media

These are all security issues fixed in the python312-3.12.12-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15743-1 sbctl-0.18-2.1 on GA media

These are all security issues fixed in the sbctl-0.18-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15740-1 erlang27-27.1.3-1.1 on GA media

These are all security issues fixed in the erlang27-27.1.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15741-1 libIex-3_4-33-3.4.3-1.1 on GA media

These are all security issues fixed in the libIex-34-33-3.4.3-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE SLED15 / SLES15 Security Update : alloy (SUSE-SU-2025:4121-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4121-1 advisory. - update to 1.11.3: - CVE-2025-58058: Fixed memory leaks in xz. bsc1248960 - CVE-2025-11065: Fixed sensitive...

FreeBSD : chromium -- multiple security fixes (ca5d4e87-c465-11f0-b3f7-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the ca5d4e87-c465-11f0-b3f7-a8a1599412c6 advisory. Chrome Releases reports: This update includes 2 security fixes: Tenable has extracted the...

EUVD-2025-197854

ESF-IDF is the Espressif Internet of Things IOT Development Framework. When the ESP32 is in advertising mode, if it receives a connection request containing an invalid Access Address AA of 0x00000000 or 0xFFFFFFFF, advertising may stop unexpectedly. In this case, the controller may incorrectly...

CVE-2025-64342

CVE-2025-64342 affects ESF-IDF (Espressif IoT Development Framework) used with ESP32 Bluetooth controller. When in advertising mode, receiving a connection request with an invalid Access Address (AA) of 0x00000000 or 0xFFFFFFFF may cause advertising to stop unexpectedly and the controller to repo...