SUSE: Security Advisory (SUSE-SU-2025:3699-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15 / SLES15 Security Update : protobuf (SUSE-SU-2025:3722-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:3722-1 advisory. - CVE-2025-4565: parsing of untrusted Protocol Buffers data containing an arbitrary number of recursive groups or...

SUSE SLES15 Security Update : kernel (Live Patch 43 for SLE 15 SP4) (SUSE-SU-2025:3720-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:3720-1 advisory. This update for the Linux Kernel 5.14.21-15040024173 fixes several issues. The following security issues were fixed: - CVE-2025-38678: netfilte...

SUSE CVE-2023-53701

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

SUSE CVE-2025-53057

unknown...

SUSE CVE-2025-53066

unknown...

SUSE CVE-2025-59438

Mbed TLS through 3.6.4 has an Observable Timing Discrepancy...

SUSE CVE-2025-61748

unknown...

SUSE CVE-2025-61755

unknown...

SUSE CVE-2025-61759

unknown...

SUSE CVE-2025-61760

unknown...

SUSE CVE-2025-62518

astral-tokio-tar is a tar archive reading/writing library for async Rust. Versions of astral-tokio-tar prior to 0.5.6 contain a boundary parsing vulnerability that allows attackers to smuggle additional archive entries by exploiting inconsistent PAX/ustar header handling. When processing archives...

SUSE CVE-2025-62587

unknown...

SUSE CVE-2025-62588

unknown...

SUSE CVE-2025-62589

unknown...

SUSE CVE-2025-62590

unknown...

SUSE CVE-2025-62591

unknown...

SUSE CVE-2025-62592

unknown...

SUSE CVE-2025-62641

unknown...

Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-15050055113 fixes several issues. The following security issues were fixed: CVE-2025-38678: netfilter: nftables: reject duplicate device on updates bsc1249534. CVE-2025-38499: cloneprivatemnt: make sure that caller has CAPSYSADMIN in the right userns...