Linux Distros Unpatched Vulnerability : CVE-2021-20243

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior...

tomcat-9.0.108-1.1 on GA media (moderate)

tomcat-9.0.108-1.1 on GA media Announcement ID: openSUSE-SU-2025:15489-1 Rating: moderate Cross-References: CVE-2025-48989 CVSS scores: CVE-2025-48989 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-48989 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...

tomcat11-11.0.10-1.1 on GA media (moderate)

tomcat11-11.0.10-1.1 on GA media Announcement ID: openSUSE-SU-2025:15491-1 Rating: moderate Cross-References: CVE-2025-48989 CVSS scores: CVE-2025-48989 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-48989 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:...

OPENSUSE-SU-2025:15491-1 ucode-intel-20250812-1.1 on GA media

These are all security issues fixed in the ucode-intel-20250812-1.1 package on the GA media of openSUSE Tumbleweed...

Linux retract_page_tables() Buffer Overflow

The vulnerability of the retractpagetables function in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux blk_mq_alloc_request_hctx Heap Buffer Overflow DoS

The vulnerability of the blkmqallocrequesthctx function in the Linux operating system is related to unvalidated array indexing. Exploitation of this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux bpf_trampoline_get_progs Buffer Overflow DoS

The vulnerability of the bpftrampolinegetprogs function in the Linux operating system’s kernel is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux snd_soc_exit() Buffer Overflow DoS

The vulnerability of the sndsocexit function in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

ROS-20250825-06

A vulnerability in the Aggregate Term Handler component of the SQLite database management system is related to errors in the numeric truncation errors. Exploitation of the vulnerability could allow an attacker acting remotely to impact the confidentiality, integrity, and availability of the SQLit...

OPENSUSE-SU-2025:15487-1 cheat-4.4.2-2.1 on GA media

These are all security issues fixed in the cheat-4.4.2-2.1 package on the GA media of openSUSE Tumbleweed...

Linux kernel Memory Reclamation DoS

The vulnerability of the Linux operating system’s kernel is related to a memory reallocation error. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux kernel Use-After-Free

The vulnerability of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux virtio_net Buffer Overflow DoS

The vulnerability in the drivers/net/virtionet.c module of the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

OPENSUSE-SU-2025:15488-1 tomcat-9.0.108-1.1 on GA media

These are all security issues fixed in the tomcat-9.0.108-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15490-1 tomcat11-11.0.10-1.1 on GA media

These are all security issues fixed in the tomcat11-11.0.10-1.1 package on the GA media of openSUSE Tumbleweed...

Linux l2cap_send_cmd() Data Compromise

The vulnerability of the l2capsendcmd function in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2025-38643

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Add missing lock in cfg80211checkandendcac Callers of wdevchandef must hold the wiphy mutex. But the worker cfg80211propagatecacdonewk never takes the lock. Which triggers the warning below with the...

terragrunt-0.85.1-1.1 on GA media (moderate)

terragrunt-0.85.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:15486-1 Rating: moderate Cross-References: CVE-2025-8959 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

libtiff-devel-32bit-4.7.0-8.1 on GA media (moderate)

libtiff-devel-32bit-4.7.0-8.1 on GA media Announcement ID: openSUSE-SU-2025:15487-1 Rating: moderate Cross-References: CVE-2024-13978 CVE-2025-8534 CVE-2025-9165 CVSS scores: CVE-2024-13978 SUSE : 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2024-13978 SUSE : 5.7...

AZL-71167 CVE-2025-38643 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Add missing lock in cfg80211checkandendcac Callers of wdevchandef must hold the wiphy mutex. But the worker cfg80211propagatecacdonewk never takes the lock. Which triggers the warning below with the...