OPENSUSE-SU-2025:15474-1 aide-0.19.2-1.1 on GA media

These are all security issues fixed in the aide-0.19.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15476-1 gimp-3.0.4-2.1 on GA media

These are all security issues fixed in the gimp-3.0.4-2.1 package on the GA media of openSUSE Tumbleweed...

Slackware Linux 15.0 / current mozilla-firefox Vulnerability (SSA:2025-231-01)

The version of mozilla-firefox installed on the remote host is prior to 140.2.0esr. It is, therefore, affected by a vulnerability as referenced in the SSA:2025-231-01 advisory. New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted...

OPENSUSE-SU-2025:15477-1 pam-1.7.1-3.1 on GA media

These are all security issues fixed in the pam-1.7.1-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15475-1 flake-pilot-3.1.21-1.1 on GA media

These are all security issues fixed in the flake-pilot-3.1.21-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15473-1 abseil-cpp-devel-20250814.0-2.1 on GA media

These are all security issues fixed in the abseil-cpp-devel-20250814.0-2.1 package on the GA media of openSUSE Tumbleweed...

TencentOS Server 4: java-21-konajdk (TSSA-2025:0665)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0665 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

OPENSUSE-SU-2025:15480-1 keylime-ima-policy-0.2.8+12-1.1 on GA media

These are all security issues fixed in the keylime-ima-policy-0.2.8+12-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15471-1 ImageMagick-7.1.2.1-1.1 on GA media

These are all security issues fixed in the ImageMagick-7.1.2.1-1.1 package on the GA media of openSUSE Tumbleweed...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-140.2.0esr-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For...

Security update for the Linux Kernel (Live Patch 55 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059198 fixes several issues. The following security issues were fixed: CVE-2025-38494: HID: core: do not bypass hidhwrawrequest bsc1247350. CVE-2025-38495: HID: core: ensure the allocated report buffer can contain the reserved report ID bsc1247351...

Important: Red Hat Security Advisory: tomcat security update

An update for tomcat is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Syst...

K000153092: Apache Tomcat vulnerabilities CVE-2025-52520 and CVE-2025-49125

Security Advisory Description CVE-2025-52520 For some unlikely configurations of multipart upload, an Integer Overflow vulnerability in Apache Tomcat could lead to a DoS via bypassing of size limits. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.8, from 10.1.0-M1 through 10.1.42,...

CLSA-2025-1755682686 kernel: Fix of 10 CVEs

netsched: hfsc: Fix a UAF vulnerability in class handling CVE-2025-37797 - sunrpc: handle SVCGARBAGE during svc auth processing as auth error CVE-2025-38089 - net: ch9200: fix uninitialised access during miinwayrestart CVE-2025-38086 - ext4: fix out-of-bound read in ext4xattrinodedecrefall...

ROOT-OS-DEBIAN-11-CVE-2025-4373 CVE-2025-4373 in rootio-glib2.0 - Patched by Root

Root has patched CVE-2025-4373 in the rootio-glib2.0 package for Root:Debian:11. Multiple fixed versions available...

CLSA-2025-1755681456 kernel: Fix of 2 CVEs

can: bcm: Fix UAF in bcmprocshow CVE-2023-52922 - udmabuf: fix a buf size overflow issue during udmabuf creation CVE-2025-37803...

SUSE-SU-2025:02923-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2019-11135: TSX Asynchronous Abort condition bsc1139073. - CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL...

OPENSUSE-SU-2025:15470-1 wicked2nm-1.2.1-1.1 on GA media

These are all security issues fixed in the wicked2nm-1.2.1-1.1 package on the GA media of openSUSE Tumbleweed...

Oracle Linux 8 : mingw-sqlite (ELSA-2025-14101)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-14101 advisory. - Fix CVE-2019-5827 CVE-2019-13750 CVE-2019-13751 - Fix CVE-2019-19603 CVE-2020-13435 CVE-2020-35527 - Fix CVE-2020-35525 CVE-2022-35737 CVE-2020-24736 - Fix...

Linux Distros Unpatched Vulnerability : CVE-2022-2068

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In addition to the crehash shell command injection identified in CVE-2022-1292, further circumstances where the crehash script does not properly sanitise shell...