SUSE-SU-2025:0452-1 Security update for the Linux Kernel (Live Patch 49 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059179 fixes several issues. The following security issues were fixed: - CVE-2024-45016: netem: fix return value if duplicate enqueue fails bsc1230998. - CVE-2024-47684: tcp: check skb is non-NULL in tcprtodeltaus bsc1231993...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this update ...

Important: Red Hat Security Advisory: RHUI 4.11 security, bugfix, and enhancement update

An updated version of Red Hat Update Infrastructure RHUI is now available. RHUI 4.11 updates Pulp to a newer upstream version, fixes several issues, and adds an enhancement. Red Hat Update Infrastructure RHUI provides a highly scalable and redundant framework for managing repositories and content...

OPENSUSE-SU-2025:14785-1 kernel-firmware-mediatek-20250206-1.1 on GA media

These are all security issues fixed in the kernel-firmware-mediatek-20250206-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14768-1 grafana-11.5.1-1.1 on GA media

These are all security issues fixed in the grafana-11.5.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14798-1 kernel-firmware-sound-20250210-1.1 on GA media

These are all security issues fixed in the kernel-firmware-sound-20250210-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14778-1 kernel-firmware-dpaa2-20250206-1.1 on GA media

These are all security issues fixed in the kernel-firmware-dpaa2-20250206-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14801-1 kernel-firmware-usb-network-20250206-1.1 on GA media

These are all security issues fixed in the kernel-firmware-usb-network-20250206-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14772-1 kernel-firmware-ath12k-20250206-1.1 on GA media

These are all security issues fixed in the kernel-firmware-ath12k-20250206-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14786-1 kernel-firmware-mellanox-20250206-1.1 on GA media

These are all security issues fixed in the kernel-firmware-mellanox-20250206-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE SLES15 Security Update : ovmf (SUSE-SU-2025:0407-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0407-1 advisory. - CVE-2023-45229: out-of-bounds read in edk2 when processing IANA/IATA options in DHCPv6 Advertise messages. bsc1218879 -...

AlmaLinux 8 : thunderbird (ALSA-2025:1292)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2025:1292 advisory. firefox: thunderbird: Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7 CVE-2025-1017 firefox: thunderbir...

The vulnerability of the nvme-pci component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the nvme-pci component of the Linux operating system’s kernel is related to improper input validation. Exploiting this vulnerability can allow an attacker to cause a service failure...

OPENSUSE-SU-2025:14789-1 kernel-firmware-nfp-20250206-1.1 on GA media

These are all security issues fixed in the kernel-firmware-nfp-20250206-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14800-1 kernel-firmware-ueagle-20250206-1.1 on GA media

These are all security issues fixed in the kernel-firmware-ueagle-20250206-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14782-1 kernel-firmware-liquidio-20250206-1.1 on GA media

These are all security issues fixed in the kernel-firmware-liquidio-20250206-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14787-1 kernel-firmware-mwifiex-20250206-1.1 on GA media

These are all security issues fixed in the kernel-firmware-mwifiex-20250206-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14777-1 kernel-firmware-chelsio-20250206-1.1 on GA media

These are all security issues fixed in the kernel-firmware-chelsio-20250206-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE SLED15: MozillaThunderbird / MozillaThunderbird-translations-common / etc (SUSE-SU-2025:0405-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0405-1 advisory. Update to Mozilla Thunderbird 128.7 MFSA 2025-10, bsc1236539. Security fixes: - CVE-2025-1009:...

Gitlab -- Vulnerabilities

Gitlab reports: A CSP-bypass XSS in merge-request page Denial of Service due to Unbounded Symbol Creation Exfiltrate content from private issues using Prompt Injection A custom permission may allow overriding Repository settings Internal HTTP header leak via route confusion in workhorse SSRF via...