Security update for SUSE Manager Client Tools

This update fixes the following issues: salt: Revert setting SELinux context for minion service bsc1233667 Removed System V init support Fix the condition of alternatives for Tumbleweed and Leap 16 Build all python bindings for all flavors Make minion reconnecting on changing master IP bsc1228182...

Security update for SUSE Manager Client Tools

This update fixes the following issues: salt: Revert setting SELinux context for minion service bsc1233667 Removed System V init support Fix the condition of alternatives for Tumbleweed and Leap 16 Build all python bindings for all flavors Make minion reconnecting on changing master IP bsc1228182...

PT-2025-11019

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fixed version Description: A NULL pointer dereference issue has been identified in the Linux kernel. The problem arises from incorrect error handling in the tcf exts miss cookie base alloc function, which...

PT-2025-8895

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A crash issue in the Linux kernel has been resolved. The problem occurs when the gpiochip get ngpios function is called, which uses chip macros to print messages. However, these macros...

Astra Linux – Vulnerability in opensc

A vulnerability was discovered in the pkcs15-init tool in OpenSC. An attacker could use a specially crafted USB Device or Smart Card, which would send a specially crafted response to APDUs to the system. When buffers are partially filled with data, the initialized parts of the buffer can be...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ipvs: fixed an undefined behavior due to uninitialized stack access in ipvsprotocolinit Under certain kernel configurations when building with Clang/LLVM, the compiler does not generate a return or jump as the terminator...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: crypto: bcm – add an error check in the ahashhmacinit function The ahashinit functions may return errors. The ahashhmacinit function should not return ok when ahashinit returns an error. For example, ahashinit might return -ENOME...

PT-2025-16739

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue was related to the zynqmp audio init function, where devm kasprintf calls could return null pointers on failure, but some...

CVE-2025-24971

DumpDrop is a stupid simple file upload application that provides an interface for dragging and dropping files. An OS Command Injection vulnerability was discovered in the DumbDrop application, "/upload/init" endpoint. This vulnerability could allow an attacker to execute arbitrary code remotely...

CLSA-2025-1738672047 kernel: Fix of 15 CVEs

drm/amdgpu: add missing size check in amdgpudebugfsgprwaveread CVE-2024-50282 - drm/amdgpu: fix usage slab after free CVE-2024-56551 - Bluetooth: L2CAP: fix use-after-free in l2capconndel CVE-2022-3640 - netfilter: ipset: add missing range check in bitmapipuadt CVE-2024-53141 - ceph: prevent...

PT-2025-5612 · Dumpdrop · Dumpdrop

Name of the Vulnerable Software and Affected Versions: DumpDrop affected versions not specified Description: The issue is related to an OS Command Injection vulnerability in the DumpDrop application, specifically in the "/upload/init" endpoint. This vulnerability could allow an attacker to execut...

CVE-2025-24971: Improper Neutralization of Special Elements used in an OS Command

DumpDrop is a stupid simple file upload application that provides an interface for dragging and dropping files. An OS Command Injection vulnerability was discovered in the DumbDrop application, /upload/init endpoint. This vulnerability could allow an attacker to execute arbitrary code remotely wh...

GHSA-RPMJ-RPGJ-QMPM vulnerabilities

Vulnerabilities for packages: berg, lychee, linkerd2, sdp-k8s-injector, zed, nushell, rustup, linkerd-extension-init, sccache...

Vulnerability of functions bonding_init() and bonding_exit() in the driver drivers/net/bonding/bond_main.c of the Linux kernel, allowing a hacker to cause a service failure

The vulnerability of the functions bondinginit and bondingexit in the drivers/net/bonding/bondmain.c file of the Linux kernel’s bonding driver is related to resource management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()

...

mptcp: init: protect sched with rcu_read_lock

...

The vulnerability of the devm_regmap_init_encx24j600 function in the encx24j600 component of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the devmregmapinitencx24j600 function in the encx24j600 component of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

OESA-2025-1084 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: FFmpeg version n6.1.1 h...

PT-2025-14362

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak has been identified in the Linux kernel, specifically in the accelerated Receive Flow Steering aRFS structures. This leak occurs when configuring VSI during reset, as the...

DEBIAN-CVE-2024-57944

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1298: Add NULL check in ads1298init devmkasprintf can return a NULL pointer on failure. A check on the return value of such a call in ads1298init is missing. Add it...