OPENSUSE-SU-2025:15471-1 ImageMagick-7.1.2.1-1.1 on GA media

These are all security issues fixed in the ImageMagick-7.1.2.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15480-1 keylime-ima-policy-0.2.8+12-1.1 on GA media

These are all security issues fixed in the keylime-ima-policy-0.2.8+12-1.1 package on the GA media of openSUSE Tumbleweed...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-140.2.0esr-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For...

CLSA-2025-1755682686 kernel: Fix of 10 CVEs

netsched: hfsc: Fix a UAF vulnerability in class handling CVE-2025-37797 - sunrpc: handle SVCGARBAGE during svc auth processing as auth error CVE-2025-38089 - net: ch9200: fix uninitialised access during miinwayrestart CVE-2025-38086 - ext4: fix out-of-bound read in ext4xattrinodedecrefall...

SUSE-SU-2025:02923-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2019-11135: TSX Asynchronous Abort condition bsc1139073. - CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL...

OPENSUSE-SU-2025:15470-1 wicked2nm-1.2.1-1.1 on GA media

These are all security issues fixed in the wicked2nm-1.2.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15468-1 gdk-pixbuf-devel-2.42.12-5.1 on GA media

These are all security issues fixed in the gdk-pixbuf-devel-2.42.12-5.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15467-1 firefox-esr-140.2.0-1.1 on GA media

These are all security issues fixed in the firefox-esr-140.2.0-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-54145

The QR scanner could allow arbitrary websites to be opened if a user was tricked into scanning a malicious link that leveraged Firefox's open-text URL scheme This vulnerability affects Firefox for iOS 141...

CVE-2025-54143

Sandboxed iframes on webpages could potentially allow downloads to the device, bypassing the expected sandbox restrictions declared on the parent page This vulnerability affects Firefox for iOS 141...

CVE-2025-8041

In the address bar, Firefox for Android truncated the display of URLs from the end instead of prioritizing the origin. This vulnerability affects Firefox 141...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-firefox-140.2.0esr-i686-1slack15.0.txz: Upgraded. This update contains security fixes and improvements. For more...

Security update for the Linux Kernel (Live Patch 48 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059174 fixes several issues. The following security issues were fixed: CVE-2025-38494: HID: core: do not bypass hidhwrawrequest bsc1247350. CVE-2025-38495: HID: core: ensure the allocated report buffer can contain the reserved report ID bsc1247351...

OPENSUSE-SU-2025:15462-1 go-sendxmpp-0.15.0-1.1 on GA media

These are all security issues fixed in the go-sendxmpp-0.15.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15466-1 polaris-10.1.1-1.1 on GA media

These are all security issues fixed in the polaris-10.1.1-1.1 package on the GA media of openSUSE Tumbleweed...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: dma-buf/dma-resv: check if the new fence is really later CVE-2022-49935 In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Return the firmware result upon destroying QP/RQ CVE-2023-5328...

OPENSUSE-SU-2025:15464-1 nova-3.11.8-1.1 on GA media

These are all security issues fixed in the nova-3.11.8-1.1 package on the GA media of openSUSE Tumbleweed...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-36028: mm/hugetlb: fix DEBUGLOCKSWARNON1 when dissolvefreehugetlbfolio bsc1225707. - CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357:...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

RHEL 9 : kernel-rt (RHSA-2025:14005)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:14005 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...