May 13, 2025—KB5058383 (OS Build 14393.8066)

None None...

May 13, 2025—KB5058405 (OS Builds 22621.5335 and 22631.5335)

None None...

OPENSUSE-SU-2025:15479-1 ruby3.4-rubygem-activerecord-8.0-8.0.1-2.1 on GA media

These are all security issues fixed in the ruby3.4-rubygem-activerecord-8.0-8.0.1-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15472-1 MozillaThunderbird-140.2.0-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-140.2.0-1.1 package on the GA media of openSUSE Tumbleweed...

USN-7682-6: Linux kernel (IBM) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network traffic control; CVE-2025-38083, CVE-2025-37797...

OPENSUSE-SU-2025:15469-1 govulncheck-vulndb-0.0.20250818T190335-1.1 on GA media

These are all security issues fixed in the govulncheck-vulndb-0.0.20250818T190335-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15465-1 pluto-5.22.5-1.1 on GA media

These are all security issues fixed in the pluto-5.22.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15463-1 docker-machine-driver-kvm2-1.36.0-2.1 on GA media

These are all security issues fixed in the docker-machine-driver-kvm2-1.36.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15455-1 libecpg6-17.6-1.1 on GA media

These are all security issues fixed in the libecpg6-17.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15448-1 lighttpd-1.4.80-1.1 on GA media

These are all security issues fixed in the lighttpd-1.4.80-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15443-1 chromedriver-139.0.7258.127-1.1 on GA media

These are all security issues fixed in the chromedriver-139.0.7258.127-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-1477

An issue has been discovered in GitLab CE/EE affecting all versions from 8.14 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed an unauthenticated user to create a denial of service condition by sending specially crafted payloads to specific integration API endpoin...

CVE-2025-54368

CVE-2025-54368 affects uv (Python package/project manager) up to v0.8.5, where remote ZIPs are parsed streaming-wise and archive entries aren’t reconciled with the central directory. An attacker could craft a ZIP that yields legitimate contents for some installers but malicious contents for other...

OPENSUSE-SU-2025:15421-1 chromedriver-139.0.7258.66-1.1 on GA media

These are all security issues fixed in the chromedriver-139.0.7258.66-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15425-1 himmelblau-1.2.0+git.0.6befefc-1.1 on GA media

These are all security issues fixed in the himmelblau-1.2.0+git.0.6befefc-1.1 package on the GA media of openSUSE Tumbleweed...

China Accuses Nvidia of Putting Backdoors into Their Chips

The government of China has accused Nvidia of inserting a backdoor into their H20 chips: China's cyber regulator on Thursday said it had held a meeting with Nvidia over what it called "serious security issues" with the company's artificial intelligence chips. It said US AI experts had "revealed...

Linux Distros Unpatched Vulnerability : CVE-2022-22745

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Securitypolicyviolation events could have leaked cross-origin information for frame-ancestors violations. This vulnerability affects Firefox ESR 91.5, Firefox 9...

CVE-2025-54785

CVE-2025-54785 affects SuiteCRM versions 7.14.6 and 8.8.0. The issue arises from unvalidated user input passed to unserialize(), enabling potential penetration, privilege escalation, sensitive data exposure, Denial of Service, cryptomining and ransomware. Remediation: upgrade to 7.14.7 or 8.8.1. ...

GLSA-202508-02 : GPL Ghostscript: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202508-02 GPL Ghostscript: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in GPL Ghostscript. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description...

Tenable Identity Exposure < 3.77.13(LTS) / 3.93.2 Vulnerable Nodejs (TNS-2025-16)

The version of Tenable Identity Exposure formerly Tenable.ad installed on the remote host is prior to 3.77.13LTS or 3.93.2. It therefore contains a version of Nodejs that could be vulnerable. Tenable has upgrade these components to address the potential impact of the issues. Note that Nessus has...