CVE-2025-48707

An issue was discovered in Stormshield Network Security SNS before 5.0.1. TPM authentication information could, in some HA use cases, be shared among administrators, which can cause secret sharing...

Important: Red Hat Security Advisory: VolSync v0.13 security fixes and container updates

VolSync v0.13 General Availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

OPENSUSE-SU-2025:15573-1 expat-2.7.2-1.1 on GA media

These are all security issues fixed in the expat-2.7.2-1.1 package on the GA media of openSUSE Tumbleweed...

ROS-20250923-06

A vulnerability in the Apache Cassandra distributed database management system is related to improper privilege handling. Exploitation of the vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and availability of protected information. impact the...

OPENSUSE-SU-2025:15569-1 rke2-1.33-1.33.5+rke2r1-1.1 on GA media

These are all security issues fixed in the rke2-1.33-1.33.5+rke2r1-1.1 package on the GA media of openSUSE Tumbleweed...

OESA-2025-2300 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability ma...

OPENSUSE-SU-2025:15561-1 coredns-1.12.4-2.1 on GA media

These are all security issues fixed in the coredns-1.12.4-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15560-1 MozillaThunderbird-140.3.0-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-140.3.0-1.1 package on the GA media of openSUSE Tumbleweed...

mysql: Components Services unspecified vulnerability (CPU Apr 2025)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Components Services. Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...

firefox-esr-140.3.0-1.1 on GA media (moderate)

firefox-esr-140.3.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15555-1 Rating: moderate Cross-References: CVE-2025-10527 CVE-2025-10528 CVE-2025-10529 CVE-2025-10532 CVE-2025-10533 CVE-2025-10536 CVE-2025-10537 Affected Products: openSUSE Tumbleweed An update that solves 7 vulnerabilities...

OPENSUSE-SU-2025:15557-1 autogen-5.18.16-8.1 on GA media

These are all security issues fixed in the autogen-5.18.16-8.1 package on the GA media of openSUSE Tumbleweed...

tkimg-2.1.0-1.1 on GA media (moderate)

tkimg-2.1.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15556-1 Rating: moderate Cross-References: CVE-2025-8851 CVE-2025-9165 CVSS scores: CVE-2025-8851 SUSE : 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CVE-2025-8851 SUSE : 4.8...

OPENSUSE-SU-2025:15555-1 firefox-esr-140.3.0-1.1 on GA media

These are all security issues fixed in the firefox-esr-140.3.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15556-1 tkimg-2.1.0-1.1 on GA media

These are all security issues fixed in the tkimg-2.1.0-1.1 package on the GA media of openSUSE Tumbleweed...

Mozilla -- mitigation bypass vulnerability

[email protected] reports: The vulnerability has been rated as having moderate impact, affecting both confidentiality and integrity with low severity, while having no impact on availability. For Thunderbird specifically, the vulnerability cannot be exploited through email as scripting is...

Unspecified vulnerability in Xen (CNVD-2025-21331)

Xen is an open source virtual machine monitor product from Xen Open Source. The product enables different and incompatible operating systems to run on the same computer and supports migration at runtime to ensure uptime and avoid downtime. Xen has a security vulnerability that can be exploited by...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a lack of SIMD availability checking, which could lead to register corruption or miscalculated MACs...

OPENSUSE-SU-2025:15553-1 kernel-devel-6.16.7-1.1 on GA media

These are all security issues fixed in the kernel-devel-6.16.7-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15552-1 cargo-packaging-1.3.0+0-2.1 on GA media

These are all security issues fixed in the cargo-packaging-1.3.0+0-2.1 package on the GA media of openSUSE Tumbleweed...

BIT-NIFI-2021-20190

A flaw was found in jackson-databind before 2.9.10.7. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...