Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2025:0402-1 Rating: important References: 1252402 Cross-References: CVE-2025-12036 Affected Products: openSUSE Backports SLE-15-SP6 An update that fixes one vulnerability is now available. Description: This update...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2025:0403-1 Rating: important References: 1252402 Cross-References: CVE-2025-12036 Affected Products: openSUSE Backports SLE-15-SP7 An update that fixes one vulnerability is now available. Description: This update...

Security update for coredns (moderate)

openSUSE Security Update: Security update for coredns Announcement ID: openSUSE-SU-2025:0400-1 Rating: moderate References: 1249389 Cross-References: CVE-2025-58063 CVSS scores: CVE-2025-58063 SUSE: 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L Affected Products: openSUSE Backports SLE-15-SP6 ...

Security update for coredns (moderate)

openSUSE Security Update: Security update for coredns Announcement ID: openSUSE-SU-2025:0401-1 Rating: moderate References: 1249389 Cross-References: CVE-2025-58063 CVSS scores: CVE-2025-58063 SUSE: 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L Affected Products: openSUSE Backports SLE-15-SP7 ...

[BSA-125] Security Update for incus

Mathias Gibbens uploaded new packages for incus which fixed the following security problems: CVE ID : CVE-2025-54286 CVE-2025-54287 CVE-2025-54288 CVE-2025-54289 CVE-2025-54290 CVE-2025-54291 CVE-2025-54293 Multiple security issues were discovered in Incus, a system container and virtual machine...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2025:0399-1 Rating: important References: 1252013 Cross-References: CVE-2025-11756 Affected Products: openSUSE Backports SLE-15-SP7 An update that fixes one vulnerability is now available. Description: This update...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2025:0398-1 Rating: important References: 1252013 Cross-References: CVE-2025-11756 Affected Products: openSUSE Backports SLE-15-SP6 An update that fixes one vulnerability is now available. Description: This update...

CVE-2025-11720

The Firefox and Firefox Focus UI for the Android custom tab feature only showed the "site" that was loaded, not the full hostname. User supplied content hosted on a subdomain of a site could have been used to fool a user into thinking it was content from a different subdomain of that site. This...

CVE-2025-11716

Links in a sandboxed iframe could open an external app on Android without the required "allow-" permission. This vulnerability was fixed in Firefox 144 and Thunderbird 144...

CVE-2025-11710

A compromised web process using malicious IPC messages could have caused the privileged browser process to reveal blocks of its memory to the compromised process. This vulnerability was fixed in Firefox 144, Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4...

CVE-2025-11712

A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a content-type. This could have contributed to an XSS on a site that unsafely serves files without a content-type header. This vulnerabilit...

CVE-2025-11714

Memory safety bugs present in Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This...

Security update for afterburn (important)

openSUSE Security Update: Security update for afterburn Announcement ID: openSUSE-SU-2025:0386-1 Rating: important References: 1244675 1250471 Cross-References: CVE-2025-5791 CVSS scores: CVE-2025-5791 SUSE: 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N Affected Products:...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2025:0388-1 Rating: important References: 1250780 Cross-References: CVE-2025-11205 CVE-2025-11206 CVE-2025-11207 CVE-2025-11208 CVE-2025-11209 CVE-2025-11210 CVE-2025-11211 CVE-2025-11212 CVE-2025-11213...

EUVD-2022-27106

Malicious code in bioql PyPI...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2025:0378-1 Rating: important References: 1250472 Cross-References: CVE-2025-10890 CVE-2025-10891 CVE-2025-10892 Affected Products: openSUSE Backports SLE-15-SP6 An update that fixes three vulnerabilities is now...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2025:0379-1 Rating: important References: 1250472 Cross-References: CVE-2025-10890 CVE-2025-10891 CVE-2025-10892 Affected Products: openSUSE Backports SLE-15-SP7 An update that fixes three vulnerabilities is now...

kernel security update

5.14.0-570.46.1.0.16.OL9 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys lis...

Security update for onefetch (moderate)

openSUSE Security Update: Security update for onefetch Announcement ID: openSUSE-SU-2025:0356-1 Rating: moderate References: 1230085 1230686 Cross-References: CVE-2024-45405 CVSS scores: CVE-2024-45405 SUSE: 5.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N Affected Products:...

Security update for java-11-openj9 (important)

openSUSE Security Update: Security update for java-11-openj9 Announcement ID: openSUSE-SU-2025:0351-1 Rating: important References: 1235844 1241274 1241275 1241276 1246575 1246580 1246584 1246595 1246598 1246806 Cross-References: CVE-2025-21587 CVE-2025-30691 CVE-2025-30698 CVE-2025-30749...