Astra Linux – Vulnerability in edk2

EDK2 contains a vulnerability in the BIOS, where an attacker can cause a “Protection Mechanism Failure” through local access. Successful exploitation of this vulnerability will lead to the execution of arbitrary code, compromising Confidentiality, Integrity, and Availability...

java-25-openj9-25.0.1.0-1.1 on GA media (moderate)

java-25-openj9-25.0.1.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15694-1 Rating: moderate Cross-References: CVE-2025-53057 CVE-2025-61748 CVSS scores: CVE-2025-53057 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2025-53057 SUSE : 8.2...

strongswan-6.0.3-1.1 on GA media (moderate)

strongswan-6.0.3-1.1 on GA media Announcement ID: openSUSE-SU-2025:15681-1 Rating: moderate Cross-References: CVE-2025-62291 CVSS scores: CVE-2025-62291 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now b...

AMD Graphics August 2025 Security Update

AMD has informed HP of potential vulnerabilities in some AMD Graphics components, which might lead to loss of confidentiality, loss of integrity, loss of availability, system crash, arbitrary writes, out of bounds read, or denial of service. AMD is releasing software updates to mitigate the...

OPENSUSE-SU-2025:15689-1 gomuks-0.3.1-2.1 on GA media

These are all security issues fixed in the gomuks-0.3.1-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15691-1 java-17-openj9-17.0.17.0-1.1 on GA media

These are all security issues fixed in the java-17-openj9-17.0.17.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15693-1 java-21-openj9-21.0.9.0-1.1 on GA media

These are all security issues fixed in the java-21-openj9-21.0.9.0-1.1 package on the GA media of openSUSE Tumbleweed...

U-Boot net/nfs.c Heap Buffer Overflow DoS

The vulnerability of the nfslookupreply function in the net/nfs.c component of the U-Boot loader is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Moderate: Red Hat Security Advisory: Assisted Installer RHEL 8 components for Multicluster Engine for Kubernetes 2.9.1

Assisted installer RHEL 8 components for the multicluster engine for Kubernetes 2.9.1 General Availability release, with updates to container images. Assisted Installer RHEL 8 integrates components for the general multicluster engine for Kubernetes 2.9.1 release that simplify the process of...

OPENSUSE-SU-2025:15685-1 ImageMagick-7.1.2.8-1.1 on GA media

These are all security issues fixed in the ImageMagick-7.1.2.8-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15686-1 MozillaFirefox-144.0.2-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-144.0.2-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2023-53702

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: use vector instructions only if available for ChaCha20 Commit 349d03ffd5f6 "crypto: s390 - add crypto library interface for ChaCha20" added a library interface to the s390 specific ChaCha20 implementation. However no...

OPENSUSE-SU-2025:15675-1 coreboot-utils-25.09-2.1 on GA media

These are all security issues fixed in the coreboot-utils-25.09-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15681-1 strongswan-6.0.3-1.1 on GA media

These are all security issues fixed in the strongswan-6.0.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15680-1 ongres-scram-3.2-7.1 on GA media

These are all security issues fixed in the ongres-scram-3.2-7.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-59462

An attacker who tampers with the C++ CLI client may crash the UpdateService during file transfers, disrupting updates and availability...

KVM Subsystem Data Compromise

The vulnerability of the KVM virtualization subsystem in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

OPENSUSE-SU-2025:15674-1 java-25-openjdk-25.0.1.0-1.1 on GA media

These are all security issues fixed in the java-25-openjdk-25.0.1.0-1.1 package on the GA media of openSUSE Tumbleweed...

kernel: pstore/ram: Check start of empty przs during init

An out of bounds array vulnerability exists in the linux kernel, such that a missing check on the start field of a PRZ persistent ram zone during initialization leads to damage to the availability and integrity of the system...

Vulnerabilities affecting SICK TLOC100-100

SICK has identified multiple vulnerabilities in the SICK TLOC100-100 product. The vulnerabilities could potentially affect the confidentiality, integrity an availability of the product. Therefore it is strongly recommended to apply general security practices when operating the product. SICK is...