SUSE-SU-2025:20094-1 Security update for python-requests

This update for python-requests contains the following fixes: - Add patch to fix to inject the default CA bundles if they are not specified. bsc1226321, bsc1231500 - Remove Requires on python-py, it should have been removed earlier. - update to 2.32.3: Fixed bug breaking the ability to specify...

Security update for python-requests

This update for python-requests fixes the following issues: Update to 2.32.2 To provide a more stable migration for custom HTTPAdapters impacted by the CVE changes in 2.32.0, we've renamed getconnection to a new public API, getconnectionwithtlscontext. Existing custom HTTPAdapters will need to...

The vulnerability of the IBM Security Directory Integrator and the IBM Security Verify Directory Integrator data integration tools lies in the absence of a “Secure” flag in the session cookies. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the IBM Security Directory Integrator and the IBM Security Verify Directory Integrator data integration tools is related to the absence of the “Secure” flag in the session cookies. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain...

The vulnerability of the IBM Security Directory Integrator and the IBM Security Verify Directory Integrator data integration tools lies in the absence of a “Secure” flag in the session cookies. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the IBM Security Directory Integrator and the IBM Security Verify Directory Integrator data integration tools is related to the absence of the “Secure” flag in the session cookies. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain...

PT-2025-8879

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been identified where the clocksource verify choose cpus function is invoked with preemption disabled, leading to the acquisition of sleeping locks in...

The vulnerability of the Identity Manager software component, used for managing and controlling access to corporate resources and IBM Security Verify Governance applications, allows a perpetrator to execute a type of “man-in-the-middle” attack.

The vulnerability of the Identity Manager software component, which is used for managing and controlling access to corporate resources and applications in IBM Security Verify Governance, relates to the storage of sensitive data in an open manner. Exploiting this vulnerability could allow a...

Security Bulletin: A Security Vulnerability was discovered in IBM Semeru Runtime Certified Edition provided with IBM Security Verify Directory (CVE-2023-33850)

Summary A Security Vulnerability was addressed in IBM Semeru Runtime Certified Edition provided with IBM Security Verify Directory. Vulnerability Details CVEID:CVE-2023-33850 DESCRIPTION: IBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side...

CVE-2024-45650

IBM Security Verify Directory 10.0 through 10.0.3 is vulnerable to a denial of service when sending an LDAP extended operation...

CVE-2024-45650

IBM Security Verify Directory 10.0 through 10.0.3 is vulnerable to a denial of service when sending an LDAP extended operation...

CVE-2024-45650

CVE-2024-45650 affects IBM Security Verify Directory 10.0 through 10.0.3. The vulnerability is a denial of service triggered by LDAP extended operations, caused by an issue in how unusual conditions are checked (per IBM’s description). The CVSS v3.1 base score is 7.5 (NETWORK attack vector, LOW c...

CVE-2024-45650 IBM Security Verify Directory denial of service

IBM Security Verify Directory 10.0 through 10.0.3 is vulnerable to a denial of service when sending an LDAP extended operation...

CVE-2024-45650 IBM Security Verify Directory denial of service

IBM Security Verify Directory 10.0 through 10.0.3 is vulnerable to a denial of service when sending an LDAP extended operation...

CVE-2024-45650: Improper Check for Unusual or Exceptional Conditions

IBM Security Verify Directory 10.0 through 10.0.3 is vulnerable to a denial of service when sending an LDAP extended operation...

IBM Security Verify Directory 代码问题漏洞

IBM Security Verify Directory is part of an authentication and access management solution from International Business Machines IBM. A code issue vulnerability exists in IBM Security Verify Directory that stems from vulnerability to denial of service attacks when sending LDAP extension operations...

PT-2025-2719 · Ibm · Ibm Security Verify Directory

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Directory versions 10.0 through 10.0.3 Description: The issue is related to a denial of service that can occur when sending an LDAP extended operation. Recommendations: For versions 10.0 through 10.0.3, consider restrictin...

btrfs: ref-verify: fix use-after-free after invalid ref action

...

CVE-2023-33838

IBM Security Verify Governance 10.0.2 Identity Manager uses a one-way cryptographic hash against an input that should not be reversible, such as a password, but the product does not also use a salt as part of the input...

CVE-2023-33838 IBM Security Verify Governance information disclosure

IBM Security Verify Governance 10.0.2 Identity Manager uses a one-way cryptographic hash against an input that should not be reversible, such as a password, but the product does not also use a salt as part of the input...

CVE-2023-33838

CVE-2023-33838 affects IBM Security Verify Governance 10.0.2 Identity Manager. The issue is that the product uses a one-way cryptographic hash on inputs that should not be reversible (e.g., passwords) without applying a salt, increasing exposure of hashed values. The connected IBM bulletin confir...

CVE-2023-33838 IBM Security Verify Governance information disclosure

IBM Security Verify Governance 10.0.2 Identity Manager uses a one-way cryptographic hash against an input that should not be reversible, such as a password, but the product does not also use a salt as part of the input...