SUSE SLES12 Security Update : kernel (Live Patch 60 for SLE 12 SP5) (SUSE-SU-2025:01593-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01593-1 advisory. This update for the Linux Kernel 4.12.14-122228 fixes several issues. The following security issues were fixed: - CVE-2024-53156: wifi: ath9k:...

SUSE SLES15 Security Update : kernel RT (Live Patch 3 for SLE 15 SP6) (SUSE-SU-2025:01603-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01603-1 advisory. This update for the Linux Kernel 6.4.0-1506001011 fixes several issues. The following security issues were fixed: - CVE-2024-53042: ipv4:...

SUSE SLES12: kernel-livepatch-5_3_18-150300_59_164-default / etc (SUSE-SU-2025:01610-1)

The remote SUSE Linux SLES12 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01610-1 advisory. This update for the Linux Kernel 4.12.14-122225 fixes several issues. The following security issues were fixed: - CVE-2024-53156: wif...

python311-httptools-0.6.1-1.9 on GA media (moderate)

python311-httptools-0.6.1-1.9 on GA media Announcement ID: openSUSE-SU-2025:15095-1 Rating: moderate Cross-References: CVE-2021-22959 CVE-2022-32213 CVSS scores: CVE-2021-22959 SUSE : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2022-32213 SUSE : 6.8...

nbdkit-1.42.3-1.1 on GA media (moderate)

nbdkit-1.42.3-1.1 on GA media Announcement ID: openSUSE-SU-2025:15088-1 Rating: moderate Cross-References: CVE-2025-47711 CVE-2025-47712 CVSS scores: CVE-2025-47711 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2025-47711 SUSE : 7.1...

EulerOS 2.0 SP10 : kernel (EulerOS-SA-2025-1520)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : cifs: Fix UAF in cifsdemultiplexthread.CVE-2023-52572 xsk: fix OOB map writes when deleting elementsCVE-2024-56614 net: defer final 'struct net'...

SUSE SLES15 Security Update : kernel (Live Patch 48 for SLE 15 SP3) (SUSE-SU-2025:1463-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1463-1 advisory. This update for the Linux Kernel 5.3.18-15030059174 fixes several issues. The following security issues were fixed: - CVE-2024-50205: ALSA:...

SUSE SLES15 Security Update : kernel (Live Patch 17 for SLE 15 SP5) (SUSE-SU-2025:1454-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1454-1 advisory. This update for the Linux Kernel 5.14.21-1505005573 fixes several issues. The following security issues were fixed: - CVE-2024-8805: Bluetooth:...

transfig-3.2.9a-2.1 on GA media (moderate)

transfig-3.2.9a-2.1 on GA media Announcement ID: openSUSE-SU-2025:15064-1 Rating: moderate Cross-References: CVE-2025-31162 CVE-2025-31163 CVE-2025-31164 CVSS scores: CVE-2025-31162 SUSE : 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H CVE-2025-31163 SUSE : 6.6...

[R2] Security Center Version 6.6.0 Fixes Multiple Vulnerabilities

R2 Security Center Version 6.6.0 Fixes Multiple Vulnerabilities Arnie Cabral Tue, 05/06/2025 - 09:44 Security Center leverages third-party software to help provide underlying functionality. Several of the third-party components sqlite, ua-parser-js were found to contain vulnerabilities, and updat...

grafana-11.5.4-1.1 on GA media (moderate)

grafana-11.5.4-1.1 on GA media Announcement ID: openSUSE-SU-2025:15052-1 Rating: moderate Cross-References: CVE-2024-6104 CVE-2025-2703 CVE-2025-29923 CVE-2025-30204 CVE-2025-3454 CVSS scores: CVE-2024-6104 SUSE : 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N CVE-2025-2703 SUSE : 6.3...

CLSA-2025-1746190792 libreoffice: Fix of 2 CVEs

CVE-2022-38745: avoid unnecessary empty -Djava.class.path= - CVE-2024-3044: add notify for script execution...

[SECURITY] [DSA 5912-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5912-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 01, 2025 https://www.debian.org/security/faq -...

SUSE SLES12 Security Update : kernel (Live Patch 60 for SLE 12 SP5) (SUSE-SU-2025:1402-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1402-1 advisory. This update for the Linux Kernel 4.12.14-122228 fixes several issues. The following security issues were fixed: - CVE-2024-8805: Bluetooth:...

[SECURITY] [DLA 4137-1] libbpf security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4137-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk April 24, 2025 https://wiki.debian.org/LTS -...

Oracle Linux 8 : bluez (ELSA-2025-4043)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-4043 advisory. - Fixing CVE-2023-27349 - Fixing CVE-2023-51589 + bluez-5.63-4 - Fixing CVE-2023-50230 Tenable has extracted the preceding description block directly...

[SECURITY] [DLA 4134-1] fig2dev security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4134-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk April 21, 2025 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 4132-1] erlang security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4132-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès April 21, 2025 https://wiki.debian.org/LTS -...

SUSE-SU-2025:1333-1 Security update for cosign

This update for cosign fixes the following issues: - CVE-2024-6104: cosign: hashicorp/go-retryablehttp: Fixed sensitive information disclosure to log file bsc1227031 - CVE-2024-51744: cosign: github.com/golang-jwt/jwt/v4: Fixed bad documentation of error handling in ParseWithClaims leading to...

Vulnerabilities fixed in Oracle Analytics

Oracle has fixed vulnerabilities in Oracle Analytics. The vulnerabilities allow unauthenticated malicious actors to gain access to sensitive data, attack denial-of-service, and even gain complete control of systems. Specific vulnerabilities in Oracle Business Intelligence Enterprise Edition can...