CVE-2025-4947 affecting package cmake for versions less than 3.30.3-7

CVE-2025-4947 affecting package cmake for versions less than 3.30.3-7. A patched version of the package is available...

CVE-2025-22872 affecting package docker-buildx for versions less than 0.14.0-6

CVE-2025-22872 affecting package docker-buildx for versions less than 0.14.0-6. A patched version of the package is available...

CVE-2025-37890 affecting package kernel for versions less than 6.6.92.2-1

CVE-2025-37890 affecting package kernel for versions less than 6.6.92.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-37739 affecting package kernel for versions less than 6.6.92.2-1

CVE-2025-37739 affecting package kernel for versions less than 6.6.92.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-0568 affecting package php for versions less than 8.2.3-1

CVE-2023-0568 affecting package php for versions less than 8.2.3-1. A patched version of the package is available...

CVE-2024-46751 affecting package kernel for versions less than 6.6.92.2-1

CVE-2024-46751 affecting package kernel for versions less than 6.6.92.2-1. A patched version of the package is available...

CVE-2025-32911 affecting package libsoup for versions less than 3.4.4-3

CVE-2025-32911 affecting package libsoup for versions less than 3.4.4-3. A patched version of the package is available...

CVE-2025-32053 affecting package libsoup for versions less than 3.0.4-6

CVE-2025-32053 affecting package libsoup for versions less than 3.0.4-6. A patched version of the package is available...

CVE-2025-4476 affecting package libsoup for versions less than 3.0.4-7

CVE-2025-4476 affecting package libsoup for versions less than 3.0.4-7. A patched version of the package is available...

CVE-2023-28938 affecting package mdadm for versions less than 4.1-11

CVE-2023-28938 affecting package mdadm for versions less than 4.1-11. A patched version of the package is available...

CVE-2024-34155 affecting package golang for versions less than 1.18.8-8

CVE-2024-34155 affecting package golang for versions less than 1.18.8-8. A patched version of the package is available...

CVE-2025-5245 affecting package binutils for versions less than 2.37-15

CVE-2025-5245 affecting package binutils for versions less than 2.37-15. A patched version of the package is available...

CVE-2024-8096 affecting package cmake for versions less than 3.21.4-18

CVE-2024-8096 affecting package cmake for versions less than 3.21.4-18. A patched version of the package is available...

Security update for libsoup

This update for libsoup fixes the following issues: CVE-2025-4945: Add value checks for date/time parsing bsc1243314. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command liste...

Security update for wireshark

This update for wireshark fixes the following issues: CVE-2025-5601: Dissection engine crash bsc1244081. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your...

CVE-2025-38346

In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix UAF when lookup kallsym after ftrace disabled The following issue happens with a buggy module: BUG: unable to handle page fault for address: ffffffffc05d0218 PGD 1bd66f067 P4D 1bd66f067 PUD 1bd671067 PMD 101808067 PTE...

DEBIAN-CVE-2025-38343

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: drop fragments with multicast or broadcast RA IEEE 802.11 fragmentation can only be applied to unicast frames. Therefore, drop fragments with multicast or broadcast RA. This patch addresses vulnerabilities suc...

CVE-2025-6948 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 17.11 before 17.11.6, 18.0 before 18.0.4, and 18.1 before 18.1.2 that, under certain conditions, could have allowed a successful attacker to execute actions on behalf of users by injecting malicious content...

CVE-2025-38348 wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback()

In the Linux kernel, the following vulnerability has been resolved: wifi: p54: prevent buffer-overflow in p54rxeepromreadback Robert Morris reported: |If a malicious USB device pretends to be an Intersil p54 wifi |interface and generates an eepromreadback message with a large |eeprom-v1.len,...

CVE-2025-38343

CVE-2025-38343 relates to the Linux kernel wifi mt76 mt7996 handling of 802.11 fragmentation. A patch ensures multicast/broadcast frames are not fragmented, since IEEE 802.11 fragmentation is limited to unicast frames; this addresses the underlying issue referenced by CVE-2020-26145. Connected so...