CVE-2025-38006

In the Linux kernel, the following vulnerability has been resolved: net: mctp: Don't access ifaindex when missing In mctpdumpaddrinfo, ifaindex can be used to filter interfaces, but only when the struct ifaddrmsg is provided. Otherwise it will be comparing to uninitialised memory - reproducible i...

SUSE-SU-2025:20426-1 Security update for libblockdev

This update for libblockdev fixes the following issues: - CVE-2025-6019: Suppress privilege escalation during xfs fs resize bsc1243226...

Security update 4.3.15.2 SUSE Manager Server 4.3

This update fixes the following issues: netty: Security issues fixed: CVE-2024-47535: Decorate InputStream to throw an exception once the data read limit is reached bsc1233297 Other changes: Replace AlgorithmId.sha256WithRSAEncryptionoid usage with specify the OID directly susemanager-sync-data:...

Security update for Multi-Linux Manager Client Tools

This update fixes the following issues: golang-github-prometheus-prometheus was updated to version 2.53.4: Security issues fixed: CVE-2023-45288: Require Go = 1.23 for building bsc1236516 CVE-2025-22870: Bumped golang.org/x/net to version 0.39.0 bsc1238686 Other bugs fixes from version 2.53.4:...

PT-2025-26151 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to the handling of SR SPIE set/clear in the riscv uprobe process. The issue occurs when a page fault happens while...

perl-FCGI:0.78 security update

perl-FCGI 1:0.78-12 - Fix CVE-2025-40907 integer overflow when parsing FastCGI parameters perl-FCGI 1:0.78-12 - Fix CVE-2025-40907 integer overflow when parsing FastCGI parameters perl-FCGI 1:0.78-12 - Fix CVE-2025-40907 integer overflow when parsing FastCGI parameters perl-FCGI 1:0.78-12 - Fix...

PT-2025-26124 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A refcount leak issue has been identified in the Linux kernel, specifically affecting the ARM: OMAP2+ component. The of find matching node function returns a node pointer with an...

PT-2025-26084

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A refcount leak issue has been identified in the Linux kernel, specifically in the parse redboot of function within the mtd partitions module. The of get child by name function returns a...

PT-2025-25882 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use after free issue has been identified in the Linux kernel, specifically in the staging: rtl8712 component. The read/write macreg hdl functions free the pcmd pointer when Read/Writ...

PT-2025-25919 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to an overflow when configuring a loop. The issue arises from the userspace configuring a loop using an ioctl call, passi...

PT-2025-25803

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition in the nfs local open fh function has been resolved. The issue occurs when the clp-cl uuid.lock is dropped, allowing another CPU to potentially free the struct nfsd file...

PT-2025-26129 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A refcount leak bug has been identified in the Linux kernel, specifically in the omapdss init fbdev function. The issue arises when of find node by name returns a node pointer with an...

Moderate: Red Hat Security Advisory: grafana-pcp security update

An update for grafana-pcp is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Moderate: Red Hat Security Advisory: git-lfs security update

An update for git-lfs is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Moderate: Red Hat Security Advisory: containernetworking-plugins security update

An update for containernetworking-plugins is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

RHEL 8 : git-lfs (RHSA-2025:9200)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:9200 advisory. Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing th...

Moderate: skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fixes: net/http: Request smuggling due to acceptance of invalid chunked data in net/http CVE-2025-22871 For more details about the...

Moderate: gvisor-tap-vsock security update

A replacement for libslirp and VPNKit, written in pure Go. It is based on the network stack of gVisor. Compared to libslirp, gvisor-tap-vsock brings a configurable DNS server and dynamic port forwarding. Security Fixes: net/http: Request smuggling due to acceptance of invalid chunked data in...

ALSA-2025:9151 Moderate: gvisor-tap-vsock security update

A replacement for libslirp and VPNKit, written in pure Go. It is based on the network stack of gVisor. Compared to libslirp, gvisor-tap-vsock brings a configurable DNS server and dynamic port forwarding. Security Fixes: net/http: Request smuggling due to acceptance of invalid chunked data in...

RHEL 10 : apache-commons-beanutils (RHSA-2025:9166)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:9166 advisory. The Apache Commons BeanUtils library provides utility methods for accessing and modifying properties of arbitrary JavaBeans. Security Fixes:...