CVE-2025-46835 Git GUI can create and overwrite files for which the user has write permission

Git GUI allows you to use the Git source control management tools via a GUI. When a user clones an untrusted repository and is tricked into editing a file located in a maliciously named directory in the repository, then Git GUI can create and overwrite files for which the user has write permissio...

CVE-2025-37749 affecting package kernel for versions less than 6.6.92.2-1

CVE-2025-37749 affecting package kernel for versions less than 6.6.92.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-4947 affecting package cmake for versions less than 3.30.3-7

CVE-2025-4947 affecting package cmake for versions less than 3.30.3-7. A patched version of the package is available...

CVE-2025-37739 affecting package kernel for versions less than 6.6.92.2-1

CVE-2025-37739 affecting package kernel for versions less than 6.6.92.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-22872 affecting package docker-buildx for versions less than 0.14.0-6

CVE-2025-22872 affecting package docker-buildx for versions less than 0.14.0-6. A patched version of the package is available...

CVE-2025-37890 affecting package kernel for versions less than 6.6.92.2-1

CVE-2025-37890 affecting package kernel for versions less than 6.6.92.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-0568 affecting package php for versions less than 8.2.3-1

CVE-2023-0568 affecting package php for versions less than 8.2.3-1. A patched version of the package is available...

CVE-2024-46751 affecting package kernel for versions less than 6.6.92.2-1

CVE-2024-46751 affecting package kernel for versions less than 6.6.92.2-1. A patched version of the package is available...

CVE-2025-32911 affecting package libsoup for versions less than 3.4.4-3

CVE-2025-32911 affecting package libsoup for versions less than 3.4.4-3. A patched version of the package is available...

CVE-2023-28938 affecting package mdadm for versions less than 4.1-11

CVE-2023-28938 affecting package mdadm for versions less than 4.1-11. A patched version of the package is available...

CVE-2025-4476 affecting package libsoup for versions less than 3.0.4-7

CVE-2025-4476 affecting package libsoup for versions less than 3.0.4-7. A patched version of the package is available...

CVE-2025-32053 affecting package libsoup for versions less than 3.0.4-6

CVE-2025-32053 affecting package libsoup for versions less than 3.0.4-6. A patched version of the package is available...

CVE-2025-5245 affecting package binutils for versions less than 2.37-15

CVE-2025-5245 affecting package binutils for versions less than 2.37-15. A patched version of the package is available...

CVE-2024-8096 affecting package cmake for versions less than 3.21.4-18

CVE-2024-8096 affecting package cmake for versions less than 3.21.4-18. A patched version of the package is available...

CVE-2024-34155 affecting package golang for versions less than 1.18.8-8

CVE-2024-34155 affecting package golang for versions less than 1.18.8-8. A patched version of the package is available...

Security update for libsoup

This update for libsoup fixes the following issues: CVE-2025-4945: Add value checks for date/time parsing bsc1243314. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command liste...

Security update for wireshark

This update for wireshark fixes the following issues: CVE-2025-5601: Dissection engine crash bsc1244081. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your...

DEBIAN-CVE-2025-38343

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: drop fragments with multicast or broadcast RA IEEE 802.11 fragmentation can only be applied to unicast frames. Therefore, drop fragments with multicast or broadcast RA. This patch addresses vulnerabilities suc...

CVE-2025-38346

In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix UAF when lookup kallsym after ftrace disabled The following issue happens with a buggy module: BUG: unable to handle page fault for address: ffffffffc05d0218 PGD 1bd66f067 P4D 1bd66f067 PUD 1bd671067 PMD 101808067 PTE...

CVE-2025-6948 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 17.11 before 17.11.6, 18.0 before 18.0.4, and 18.1 before 18.1.2 that, under certain conditions, could have allowed a successful attacker to execute actions on behalf of users by injecting malicious content...