libQt5Bootstrap-devel-static-32bit-5.15.17+kde122-2.1 on GA media (moderate)

libQt5Bootstrap-devel-static-32bit-5.15.17+kde122-2.1 on GA media Announcement ID: openSUSE-SU-2025:15240-1 Rating: moderate Cross-References: CVE-2025-5455 CVSS scores: CVE-2025-5455 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that...

assimp-devel-6.0.2-1.1 on GA media (moderate)

assimp-devel-6.0.2-1.1 on GA media Announcement ID: openSUSE-SU-2025:15209-1 Rating: moderate Cross-References: CVE-2025-2750 CVE-2025-2751 CVE-2025-2757 CVE-2025-3158 CVE-2025-3548 CVSS scores: CVE-2025-3158 SUSE : 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CVE-2025-3158 SUSE : 4.8...

python311-pydata-sphinx-theme-0.16.1-1.1 on GA media (moderate)

python311-pydata-sphinx-theme-0.16.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:15279-1 Rating: moderate Cross-References: CVE-2025-5889 CVSS scores: CVE-2025-5889 SUSE : 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2025-5889 SUSE : 2...

PT-2025-28120 · Huawei +1 · Emui +1

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A virtual address reuse issue exists in the memory management module. This issue can be exploited by non-privileged users to access released memory, potentially affecting service integrity...

libwireshark18-4.4.7-1.1 on GA media (moderate)

libwireshark18-4.4.7-1.1 on GA media Announcement ID: openSUSE-SU-2025:15308-1 Rating: moderate Cross-References: CVE-2025-5601 CVSS scores: CVE-2025-5601 SUSE : 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now...

jupyter-matplotlib-0.11.4-15.1 on GA media (moderate)

jupyter-matplotlib-0.11.4-15.1 on GA media Announcement ID: openSUSE-SU-2025:15271-1 Rating: moderate Cross-References: CVE-2025-5889 CVSS scores: CVE-2025-5889 SUSE : 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2025-5889 SUSE : 2...

pam_pkcs11-0.6.13-2.1 on GA media (moderate)

pampkcs11-0.6.13-2.1 on GA media Announcement ID: openSUSE-SU-2025:15257-1 Rating: moderate Cross-References: CVE-2025-6018 CVSS scores: CVE-2025-6018 SUSE : 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2025-6018 SUSE : 8.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N...

perl-32bit-5.40.2-3.1 on GA media (moderate)

perl-32bit-5.40.2-3.1 on GA media Announcement ID: openSUSE-SU-2025:15258-1 Rating: moderate Cross-References: CVE-2025-40909 CVSS scores: CVE-2025-40909 SUSE : 6.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now ...

himmelblau-0.9.17+git.0.4a97692-1.1 on GA media (moderate)

himmelblau-0.9.17+git.0.4a97692-1.1 on GA media Announcement ID: openSUSE-SU-2025:15229-1 Rating: moderate Cross-References: CVE-2025-53013 CVSS scores: CVE-2025-53013 SUSE : 5.2 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N CVE-2025-53013 SUSE : 4.3...

helm-3.18.3-1.1 on GA media (moderate)

helm-3.18.3-1.1 on GA media Announcement ID: openSUSE-SU-2025:15228-1 Rating: moderate Cross-References: CVE-2025-22872 CVSS scores: CVE-2025-22872 SUSE : 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L CVE-2025-22872 SUSE : 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L...

fractal-11.2-1.1 on GA media (moderate)

fractal-11.2-1.1 on GA media Announcement ID: openSUSE-SU-2025:15218-1 Rating: moderate Cross-References: CVE-2025-48937 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the fractal-11.2-1.1...

CVE-2025-38233

In the Linux kernel, the following vulnerability has been resolved: powerpc64/ftrace: fix clobbered r15 during livepatching While r15 is clobbered always with PPCFTRACEOUTOFLINE, it is not restored in livepatch sequence leading to not so obvious fails like below: BUG: Unable to handle kernel data...

CVE-2025-38220

In the Linux kernel, the following vulnerability has been resolved: ext4: only dirty folios when data journaling regular files fstest generic/388 occasionally reproduces a crash that looks as follows: BUG: kernel NULL pointer dereference, address: 0000000000000000 ... Call Trace:...

CVE-2025-38226 media: vivid: Change the siize of the composing

In the Linux kernel, the following vulnerability has been resolved: media: vivid: Change the siize of the composing syzkaller found a bug: BUG: KASAN: vmalloc-out-of-bounds in tpgfillplanepattern drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:2608 inline BUG: KASAN: vmalloc-out-of-bounds in...

CVE-2025-38226

CVE-2025-38226 targets the Linux kernel, specifically the media/v4l2-tpg path used by vivid. The issue is a KASAN-detected vmalloc-out-of-bounds access in tpg_fill_plane_pattern and tpg_fill_plane_buffer (v4l2-tpg-core.c:2608 and 2705), causing a write of size 1440 to a kernel address during vivi...

CVE-2025-38222 ext4: inline: fix len overflow in ext4_prepare_inline_data

In the Linux kernel, the following vulnerability has been resolved: ext4: inline: fix len overflow in ext4prepareinlinedata When running the following code on an ext4 filesystem with inlinedata feature enabled, it will lead to the bug below. fd = open"file1", ORDWR | OCREAT | OTRUNC, 0666;...

CVE-2025-38222

In the Linux kernel, the following vulnerability has been resolved: ext4: inline: fix len overflow in ext4prepareinlinedata When running the following code on an ext4 filesystem with inlinedata feature enabled, it will lead to the bug below. fd = open"file1", ORDWR | OCREAT | OTRUNC, 0666;...

CVE-2025-38218 f2fs: fix to do sanity check on sit_bitmap_size

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on sitbitmapsize w/ below testcase, resize will generate a corrupted image which contains inconsistent metadata, so when mounting such image, it will trigger kernel panic: touch img truncate -s...

CVE-2025-38216 iommu/vt-d: Restore context entry setup order for aliased devices

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Restore context entry setup order for aliased devices Commit 2031c469f816 "iommu/vt-d: Add support for static identity domain" changed the context entry setup during domain attachment from a set-and-check policy to a...

CVE-2025-38216 iommu/vt-d: Restore context entry setup order for aliased devices

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Restore context entry setup order for aliased devices Commit 2031c469f816 "iommu/vt-d: Add support for static identity domain" changed the context entry setup during domain attachment from a set-and-check policy to a...