OPENSUSE-SU-2025:15680-1 ongres-scram-3.2-7.1 on GA media

These are all security issues fixed in the ongres-scram-3.2-7.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-5529

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the gpi peripheral config function within the Qualcomm Generic Peripheral Interface GPI component of the dmaengine subsystem. The issue occurs when reallocating...

OPENSUSE-SU-2025:15681-1 strongswan-6.0.3-1.1 on GA media

These are all security issues fixed in the strongswan-6.0.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15674-1 java-25-openjdk-25.0.1.0-1.1 on GA media

These are all security issues fixed in the java-25-openjdk-25.0.1.0-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-40027: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/9p: fix double req put in p9fdcancelled Syzkaller reports a KASAN issue as below: general protection fault, probably for non-canonical address 0xfbd59c0000000021: 0000 1 PREEMPT SMP KASAN NOPTI KASAN: maybe wild-memory-access...

OPENSUSE-SU-2025:15670-1 java-21-openjdk-21.0.9.0-1.1 on GA media

These are all security issues fixed in the java-21-openjdk-21.0.9.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15672-1 libluajit-5_1-2-2.1.20250826-1.1 on GA media

These are all security issues fixed in the libluajit-51-2-2.1.20250826-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15671-1 kernel-devel-6.17.5-1.1 on GA media

These are all security issues fixed in the kernel-devel-6.17.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15667-1 netty-4.1.128-1.1 on GA media

These are all security issues fixed in the netty-4.1.128-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15666-1 govulncheck-vulndb-0.0.20251023T162509-1.1 on GA media

These are all security issues fixed in the govulncheck-vulndb-0.0.20251023T162509-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15663-1 openbao-2.4.3-1.1 on GA media

These are all security issues fixed in the openbao-2.4.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15661-1 java-17-openjdk-17.0.17.0-1.1 on GA media

These are all security issues fixed in the java-17-openjdk-17.0.17.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15664-1 python311-pypdf-6.1.3-1.1 on GA media

These are all security issues fixed in the python311-pypdf-6.1.3-1.1 package on the GA media of openSUSE Tumbleweed...

EUVD-2025-35350

The PixelYourSite – Your smart PIXEL TAG & API Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 11.1.2. This is due to missing or incorrect nonce validation on the adminEnableGdprAjax function. This makes it possible for unauthenticate...

OPENSUSE-SU-2025:15657-1 bleachbit-5.0.0-1.1 on GA media

These are all security issues fixed in the bleachbit-5.0.0-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2022-50556: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm: Fix potential null-ptr-deref due to drmmmodeconfiginit drmmmodeconfiginit will call drmmodecreatestandardproperties and won't check the ret value. When drmmodecreatestandardproperties failed due to alloc, property will be a...

sccache-0.12.0~1-1.1 on GA media (moderate)

sccache-0.12.01-1.1 on GA media Announcement ID: openSUSE-SU-2025:15656-1 Rating: moderate Cross-References: CVE-2024-12224 CVSS scores: CVE-2024-12224 SUSE : 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N CVE-2024-12224 SUSE : 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N...

WordPress plugin PixelYourSite 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

OPENSUSE-SU-2025:15658-1 python311-uv-0.9.5-1.1 on GA media

These are all security issues fixed in the python311-uv-0.9.5-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-10651: Improper Neutralization of Input During Web Page Generation

The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ordermail' setting in versions up to, and including, 2.11.22. This is due to insufficient sanitization on the ordermail field and a lack of escaping on output. This makes it possible for authenticate...