An update that fixes one vulnerability is now available. . openSUSE Security Update: Security update for doomsday ______________________________________________________________________________ Announcement ID: openSUSE-SU-2025:0117-1 Rating: important References: #1239917 Cross-References: CVE-2025-2592 CVSS scores: CVE-2025-2592 (SUSE): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Affected Products: openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for doomsday fixes the following issues: - CVE-2025-2592: Use system assimp library to fix a heap-based buffer overflow (boo#1239917) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2025-117=1 Package List: - openSUSE Backports SLE-15-SP6 (ppc64le s390x x86_64): doomsday-2.3.1-bp156.4.3.1 References: https://www.suse.com/security/cve/CVE-2025-2592.html https://bugzilla.suse.com/show_bug.cgi?id=1239917 . A significant openSUSE patch has been released, addressing a security vulnerability linked to a buffer overflow in the doomsday application. Discover further details regarding this correction.. openSUSE update, doomsday security, buffer overflow patch, Linux vulnerabilities. . Severity: Important. LinuxSecurity.com Team
Multiple vulnerabilities in Doomsday might allow remote execution of arbitrary code or a Denial of Service.. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200802-02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: Doomsday: Multiple vulnerabilities Date: February 06, 2008 Bugs: #190835 ID: 200802-02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= Multiple vulnerabilities in Doomsday might allow remote execution of arbitrary code or a Denial of Service. Background ========= The Doomsday Engine (deng) is a modern gaming engine for popular ID games like Doom, Heretic and Hexen. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 games-fps/doomsday
Format string vulnerabilities in Doomsday may lead to the execution of arbitrary code.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200604-05 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: Doomsday: Format string vulnerability Date: April 06, 2006 Bugs: #128690 ID: 200604-05 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= Format string vulnerabilities in Doomsday may lead to the execution of arbitrary code. Background ========= Doomsday is a modern gaming engine for popular ID games like Doom, Heretic and Hexen. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 games-fps/doomsday
Get the latest Linux and open source security news straight to your inbox.