SUSE-SU-2025:02420-1 Security update for the Linux Kernel RT (Live Patch 2 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-150600108 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow bsc1234854. - CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability bsc1235005. - CVE-2024-53173:...

Important: Red Hat Security Advisory: java-11-openjdk ELS security update

An update for java-11-openjdk with Extended Lifecycle Support is now available for Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, and Red Hat Enterprise Linux 9. The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit...

RHEL 8 : kernel (RHSA-2025:11455)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:11455 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: tcp/dccp: Don't use...

OPENSUSE-SU-2025:15370-1 hauler-1.2.5-1.1 on GA media

These are all security issues fixed in the hauler-1.2.5-1.1 package on the GA media of openSUSE Tumbleweed...

RHEL 7 / 8 / 9 : java-11-openjdk ELS (RHSA-2025:10865)

The remote Redhat Enterprise Linux 7 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:10865 advisory. The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. This...

OPENSUSE-SU-2025:15364-1 libexslt0-1.1.43-2.1 on GA media

These are all security issues fixed in the libexslt0-1.1.43-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15362-1 java-21-openjdk-21.0.8.0-1.1 on GA media

These are all security issues fixed in the java-21-openjdk-21.0.8.0-1.1 package on the GA media of openSUSE Tumbleweed...

Fedora 42 : pypy (2025-a37bf9ddbd)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-a37bf9ddbd advisory. - Update to 7.3.20 - Security fixes for CVE-2025-47273, CVE-2024-47081 and CVE-2025-50181 in pip and setuptools wheels Tenable has extracted the...

OPENSUSE-SU-2025:15368-1 lemon-3.50.3-1.1 on GA media

These are all security issues fixed in the lemon-3.50.3-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE-SU-2025:20498-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup bsc1237913. - CVE-2024-58053: rxrpc: Fix handling of received connection abort...

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup bsc1237913. CVE-2024-58053: rxrpc: Fix handling of received connection abort bsc1238982...

CVE-2025-6023

An open redirect vulnerability has been identified in Grafana OSS that can be exploited to achieve XSS attacks. The vulnerability was introduced in Grafana v11.5.0. The open redirect can be chained with path traversal vulnerabilities to achieve XSS. Fixed in versions 12.0.2+security-01,...

SUSE SLES15 Security Update : coreutils (SUSE-SU-2025:02354-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02354-1 advisory. Security fixes: - CVE-2025-5278: Fixed heap buffer under-read may lead to a crash or leak sensitive data bsc1243767 Other fixes: - ls: avoi...

OPENSUSE-SU-2025:15357-1 java-17-openjdk-17.0.16.0-1.1 on GA media

These are all security issues fixed in the java-17-openjdk-17.0.16.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15354-1 bind-9.20.11-1.1 on GA media

These are all security issues fixed in the bind-9.20.11-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15355-1 cosign-2.5.3-1.1 on GA media

These are all security issues fixed in the cosign-2.5.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15356-1 java-11-openjdk-11.0.28.0-1.1 on GA media

These are all security issues fixed in the java-11-openjdk-11.0.28.0-1.1 package on the GA media of openSUSE Tumbleweed...

RHEL 8 / 9 : java-1.8.0-openjdk (RHSA-2025:10862)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:10862 advisory. The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Securit...

OPENSUSE-SU-2025:15359-1 valkey-8.1.3-1.1 on GA media

These are all security issues fixed in the valkey-8.1.3-1.1 package on the GA media of openSUSE Tumbleweed...

Important: Red Hat Security Advisory: OpenJDK 21.0.8 Security Update for Portable Linux Builds

An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...