SUSE SLES15 Security Update : kernel (Live Patch 48 for SLE 15 SP3) (SUSE-SU-2025:1463-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1463-1 advisory. This update for the Linux Kernel 5.3.18-15030059174 fixes several issues. The following security issues were fixed: - CVE-2024-50205: ALSA:...

transfig-3.2.9a-2.1 on GA media (moderate)

transfig-3.2.9a-2.1 on GA media Announcement ID: openSUSE-SU-2025:15064-1 Rating: moderate Cross-References: CVE-2025-31162 CVE-2025-31163 CVE-2025-31164 CVSS scores: CVE-2025-31162 SUSE : 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H CVE-2025-31163 SUSE : 6.6...

[R2] Security Center Version 6.6.0 Fixes Multiple Vulnerabilities

R2 Security Center Version 6.6.0 Fixes Multiple Vulnerabilities Arnie Cabral Tue, 05/06/2025 - 09:44 Security Center leverages third-party software to help provide underlying functionality. Several of the third-party components sqlite, ua-parser-js were found to contain vulnerabilities, and updat...

grafana-11.5.4-1.1 on GA media (moderate)

grafana-11.5.4-1.1 on GA media Announcement ID: openSUSE-SU-2025:15052-1 Rating: moderate Cross-References: CVE-2024-6104 CVE-2025-2703 CVE-2025-29923 CVE-2025-30204 CVE-2025-3454 CVSS scores: CVE-2024-6104 SUSE : 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N CVE-2025-2703 SUSE : 6.3...

CLSA-2025-1746190792 libreoffice: Fix of 2 CVEs

CVE-2022-38745: avoid unnecessary empty -Djava.class.path= - CVE-2024-3044: add notify for script execution...

[SECURITY] [DSA 5912-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5912-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 01, 2025 https://www.debian.org/security/faq -...

SUSE SLES12 Security Update : kernel (Live Patch 60 for SLE 12 SP5) (SUSE-SU-2025:1402-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1402-1 advisory. This update for the Linux Kernel 4.12.14-122228 fixes several issues. The following security issues were fixed: - CVE-2024-8805: Bluetooth:...

[SECURITY] [DLA 4137-1] libbpf security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4137-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk April 24, 2025 https://wiki.debian.org/LTS -...

Oracle Linux 8 : bluez (ELSA-2025-4043)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-4043 advisory. - Fixing CVE-2023-27349 - Fixing CVE-2023-51589 + bluez-5.63-4 - Fixing CVE-2023-50230 Tenable has extracted the preceding description block directly...

[SECURITY] [DLA 4134-1] fig2dev security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4134-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk April 21, 2025 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 4132-1] erlang security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4132-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès April 21, 2025 https://wiki.debian.org/LTS -...

SUSE-SU-2025:1333-1 Security update for cosign

This update for cosign fixes the following issues: - CVE-2024-6104: cosign: hashicorp/go-retryablehttp: Fixed sensitive information disclosure to log file bsc1227031 - CVE-2024-51744: cosign: github.com/golang-jwt/jwt/v4: Fixed bad documentation of error handling in ParseWithClaims leading to...

Vulnerabilities fixed in Oracle Analytics

Oracle has fixed vulnerabilities in Oracle Analytics. The vulnerabilities allow unauthenticated malicious actors to gain access to sensitive data, attack denial-of-service, and even gain complete control of systems. Specific vulnerabilities in Oracle Business Intelligence Enterprise Edition can...

Vulnerabilities fixed in Oracle Database Products

Oracle has fixed vulnerabilities in several Oracle Database Products and subsystems, including Oracle Server, NoSQL, TimesTen, Secure Backup and Essbase. The vulnerabilities allow unauthenticated malicious actors to cause a Denial-of-Service or gain unauthorized access to sensitive data and...

SUSE SLES15 Security Update : kernel (Live Patch 49 for SLE 15 SP3) (SUSE-SU-2025:1225-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1225-1 advisory. This update for the Linux Kernel 5.3.18-15030059179 fixes several issues. The following security issues were fixed: - CVE-2022-49014: net: tun:...

SUSE SLES12 / SLES15 Security Update : kernel (Live Patch 46 for SLE 15 SP3) (SUSE-SU-2025:1254-1)

The remote SUSE Linux SLES12 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1254-1 advisory. This update for the Linux Kernel 4.12.14-122219 fixes several issues. The following security issues were fixed: - CVE-2022-49014: net:...

SUSE-SU-2025:1248-1 Security update for the Linux Kernel (Live Patch 47 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059170 fixes several issues. The following security issues were fixed: - CVE-2022-49014: net: tun: Fix use-after-free in tundetach bsc1232818. - CVE-2022-49563: crypto: qat - add param check for RSA bsc1238788. - CVE-2022-49564: crypto: qat - add param...

SUSE-SU-2025:1195-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF bsc1237918. - CVE-2022-49465: blk-throttle: Set BIOTHROTTLED when bio has been throttled bsc1238919. -...

Vulnerabilities fixed in Ivanti Endpoint Manager

Ivanti has fixed vulnerabilities in Ivanti Endpoint Manager Specifically for versions prior to 2024 SU1 and 2022 SU7. An attacker can exploit multiple vulnerabilities in Ivanti Endpoint Manager to elevate privileges, conduct cross-site scripting attacks, execute arbitrary code, manipulate data an...

Microsoft and Adobe Patch Tuesday, April 2025 Security Update Review

Microsoft's April 2025 Patch Tuesday has arrived, delivering critical security updates and fixes across the various products, features, and roles. Here's a quick breakdown of what you need to know. Microsoft Patch Tuesday for April 2025 In this month's Patch Tuesday, April 2025 edition, Microsoft...