Alerts This Week
Warning Icon 1 560
Alerts This Week
Warning Icon 1 560

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -5 articles for you...
100

SUSE Linux Micro 6.0: 2025:20144-1 moderate: curl gzip overflow

* bsc#1235151 * bsc#1236588 * bsc#1236590 Cross-References: . # Security update for curl Announcement ID: SUSE-SU-2025:20144-1 Release Date: 2025-03-12T10:46:56Z Rating: moderate References: * bsc#1235151 * bsc#1236588 * bsc#1236590 Cross-References: * CVE-2025-0167 * CVE-2025-0725 CVSS scores: * CVE-2025-0167 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2025-0167 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2025-0167 ( NVD ): 3.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N * CVE-2025-0725 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2025-0725 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2025-0725 ( NVD ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Affected Products: * SUSE Linux Micro 6.0 An update that solves two vulnerabilities and has one fix can now be installed. ## Description: This update for curl fixes the following issues: Security issues fixed: * CVE-2025-0725: Fixed gzip integer overflow (bsc#1236590) * CVE-2025-0167: Fixed netrc and default credential leak (bsc#1236588) Other issues fixed: * Make sure the TLS handshake after a successful STARTTLS command is fully done before further sending/receiving on the connection. (bsc#1235151) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-239=1 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * curl-8.6.0-6.1 * libcurl4-debuginfo-8.6.0-6.1 * curl-debugsource-8.6.0-6.1 * libcurl4-8.6.0-6.1 * curl-debuginfo-8.6.0-6.1 ## References: * https://www.suse.com/security/cve/CVE-2025-0167.html * https://www.suse.com/security/cve/CVE-2025-0725.html *https://bugzilla.suse.com/show_bug.cgi?id=1235151 * https://bugzilla.suse.com/show_bug.cgi?id=1236588 * https://bugzilla.suse.com/show_bug.cgi?id=1236590 . SUSE has released an update to tackle moderate vulnerabilities in curl, addressing significant flaws that could impact users.. SUSE Security Update, Curl Patch, Linux Micro Security, Software Vulnerability Fix. . LinuxSecurity.com Team

Calendar 2 Jun 04, 2025 SuSE
100

SUSE: 2025:0369-1 moderate: curl gzip overflow and credential leak

* bsc#1236588 * bsc#1236590 Cross-References: * CVE-2025-0167 . # Security update for curl Announcement ID: SUSE-SU-2025:0369-1 Release Date: 2025-02-05T15:32:42Z Rating: moderate References: * bsc#1236588 * bsc#1236590 Cross-References: * CVE-2025-0167 * CVE-2025-0725 CVSS scores: * CVE-2025-0167 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2025-0167 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2025-0725 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2025-0725 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2025-0725 ( NVD ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for curl fixes the following issues: * CVE-2025-0725: Fixed gzip integer overflow (bsc#1236590) * CVE-2025-0167: Fixed netrc and default credential leak (bsc#1236588) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-369=1 openSUSE-SLE-15.6-2025-369=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-369=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * curl-debugsource-8.6.0-150600.4.21.1 * libcurl4-8.6.0-150600.4.21.1 * curl-debuginfo-8.6.0-150600.4.21.1 * libcurl-devel-8.6.0-150600.4.21.1 * curl-8.6.0-150600.4.21.1 * libcurl4-debuginfo-8.6.0-150600.4.21.1 * openSUSE Leap 15.6 (x86_64) *libcurl-devel-32bit-8.6.0-150600.4.21.1 * libcurl4-32bit-8.6.0-150600.4.21.1 * libcurl4-32bit-debuginfo-8.6.0-150600.4.21.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libcurl4-64bit-8.6.0-150600.4.21.1 * libcurl4-64bit-debuginfo-8.6.0-150600.4.21.1 * libcurl-devel-64bit-8.6.0-150600.4.21.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * curl-debugsource-8.6.0-150600.4.21.1 * libcurl4-8.6.0-150600.4.21.1 * curl-debuginfo-8.6.0-150600.4.21.1 * libcurl-devel-8.6.0-150600.4.21.1 * curl-8.6.0-150600.4.21.1 * libcurl4-debuginfo-8.6.0-150600.4.21.1 * Basesystem Module 15-SP6 (x86_64) * libcurl4-32bit-8.6.0-150600.4.21.1 * libcurl4-32bit-debuginfo-8.6.0-150600.4.21.1 ## References: * https://www.suse.com/security/cve/CVE-2025-0167.html * https://www.suse.com/security/cve/CVE-2025-0725.html * https://bugzilla.suse.com/show_bug.cgi?id=1236588 * https://bugzilla.suse.com/show_bug.cgi?id=1236590 . Enhance SUSE curl to address moderate vulnerabilities: gzip overflow and credential exposure. Ensure your system remains protected by applying the newest updates.. SUSE curl update, curl security advisory, SUSE moderate updates, security patch curl. . LinuxSecurity.com Team

Calendar 2 Feb 06, 2025 SuSE
202

openSUSE 15.6: SUSE-SU-2025:0369-1 moderate: curl issues

An update that solves two vulnerabilities can now be installed.. # Security update for curl Announcement ID: SUSE-SU-2025:0369-1 Release Date: 2025-02-05T15:32:42Z Rating: moderate References: * bsc#1236588 * bsc#1236590 Cross-References: * CVE-2025-0167 * CVE-2025-0725 CVSS scores: * CVE-2025-0167 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2025-0167 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2025-0725 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2025-0725 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2025-0725 ( NVD ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Affected Products: * Basesystem Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for curl fixes the following issues: * CVE-2025-0725: Fixed gzip integer overflow (bsc#1236590) * CVE-2025-0167: Fixed netrc and default credential leak (bsc#1236588) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-369=1 openSUSE-SLE-15.6-2025-369=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-369=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * curl-debugsource-8.6.0-150600.4.21.1 * libcurl4-8.6.0-150600.4.21.1 * curl-debuginfo-8.6.0-150600.4.21.1 * libcurl-devel-8.6.0-150600.4.21.1 * curl-8.6.0-150600.4.21.1 * libcurl4-debuginfo-8.6.0-150600.4.21.1 * openSUSE Leap 15.6 (x86_64) *libcurl-devel-32bit-8.6.0-150600.4.21.1 * libcurl4-32bit-8.6.0-150600.4.21.1 * libcurl4-32bit-debuginfo-8.6.0-150600.4.21.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libcurl4-64bit-8.6.0-150600.4.21.1 * libcurl4-64bit-debuginfo-8.6.0-150600.4.21.1 * libcurl-devel-64bit-8.6.0-150600.4.21.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * curl-debugsource-8.6.0-150600.4.21.1 * libcurl4-8.6.0-150600.4.21.1 * curl-debuginfo-8.6.0-150600.4.21.1 * libcurl-devel-8.6.0-150600.4.21.1 * curl-8.6.0-150600.4.21.1 * libcurl4-debuginfo-8.6.0-150600.4.21.1 * Basesystem Module 15-SP6 (x86_64) * libcurl4-32bit-8.6.0-150600.4.21.1 * libcurl4-32bit-debuginfo-8.6.0-150600.4.21.1 ## References: * https://www.suse.com/security/cve/CVE-2025-0167.html * https://www.suse.com/security/cve/CVE-2025-0725.html * https://bugzilla.suse.com/show_bug.cgi?id=1236588 * https://bugzilla.suse.com/show_bug.cgi?id=1236590 . SUSE issues a security notice concerning curl, targeting vulnerabilities related to gzip buffer overflow and potential credential exposure in various software solutions.. curl update, SUSE security, software patch, moderate security advisory, curl vulnerabilities. . LinuxSecurity.com Team

Calendar 2 Feb 06, 2025 OpenSUSE
100

SUSE: 2025:0372-1 moderate: curl credential leak & gzip overflow

* bsc#1236588 * bsc#1236590 Cross-References: * CVE-2025-0167 . # Security update for curl Announcement ID: SUSE-SU-2025:0372-1 Release Date: 2025-02-05T15:36:19Z Rating: moderate References: * bsc#1236588 * bsc#1236590 Cross-References: * CVE-2025-0167 * CVE-2025-0725 CVSS scores: * CVE-2025-0167 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2025-0167 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2025-0725 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2025-0725 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2025-0725 ( NVD ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Affected Products: * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves two vulnerabilities can now be installed. ## Description: This update for curl fixes the following issues: * CVE-2025-0725: Fixed gzip integer overflow (bsc#1236590) * CVE-2025-0167: Fixed netrc and default credential leak (bsc#1236588) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-372=1 * SUSE Linux Enterprise Server 15 SP3 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2025-372=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patchSUSE-SLE-Product-SLES_SAP-15-SP3-2025-372=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2025-372=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2025-372=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-372=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-372=1 ## Package List: * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * libcurl4-debuginfo-7.66.0-150200.4.84.1 * curl-debuginfo-7.66.0-150200.4.84.1 * libcurl4-7.66.0-150200.4.84.1 * curl-debugsource-7.66.0-150200.4.84.1 * curl-7.66.0-150200.4.84.1 * libcurl-devel-7.66.0-150200.4.84.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * libcurl4-32bit-debuginfo-7.66.0-150200.4.84.1 * libcurl4-32bit-7.66.0-150200.4.84.1 * SUSE Linux Enterprise Server 15 SP3 LTSS (aarch64 ppc64le s390x x86_64) * libcurl4-debuginfo-7.66.0-150200.4.84.1 * curl-debuginfo-7.66.0-150200.4.84.1 * libcurl4-7.66.0-150200.4.84.1 * curl-debugsource-7.66.0-150200.4.84.1 * curl-7.66.0-150200.4.84.1 * libcurl-devel-7.66.0-150200.4.84.1 * SUSE Linux Enterprise Server 15 SP3 LTSS (x86_64) * libcurl4-32bit-debuginfo-7.66.0-150200.4.84.1 * libcurl4-32bit-7.66.0-150200.4.84.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * libcurl4-debuginfo-7.66.0-150200.4.84.1 * curl-debuginfo-7.66.0-150200.4.84.1 * libcurl4-7.66.0-150200.4.84.1 * curl-debugsource-7.66.0-150200.4.84.1 * curl-7.66.0-150200.4.84.1 * libcurl-devel-7.66.0-150200.4.84.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * libcurl4-32bit-debuginfo-7.66.0-150200.4.84.1 * libcurl4-32bit-7.66.0-150200.4.84.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * libcurl4-debuginfo-7.66.0-150200.4.84.1 * curl-debuginfo-7.66.0-150200.4.84.1 *libcurl4-7.66.0-150200.4.84.1 * curl-debugsource-7.66.0-150200.4.84.1 * curl-7.66.0-150200.4.84.1 * libcurl-devel-7.66.0-150200.4.84.1 * SUSE Enterprise Storage 7.1 (x86_64) * libcurl4-32bit-debuginfo-7.66.0-150200.4.84.1 * libcurl4-32bit-7.66.0-150200.4.84.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * libcurl4-debuginfo-7.66.0-150200.4.84.1 * curl-debuginfo-7.66.0-150200.4.84.1 * libcurl4-7.66.0-150200.4.84.1 * curl-debugsource-7.66.0-150200.4.84.1 * curl-7.66.0-150200.4.84.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * libcurl4-debuginfo-7.66.0-150200.4.84.1 * curl-debuginfo-7.66.0-150200.4.84.1 * libcurl4-7.66.0-150200.4.84.1 * curl-debugsource-7.66.0-150200.4.84.1 * curl-7.66.0-150200.4.84.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * libcurl4-debuginfo-7.66.0-150200.4.84.1 * curl-debuginfo-7.66.0-150200.4.84.1 * libcurl4-7.66.0-150200.4.84.1 * curl-debugsource-7.66.0-150200.4.84.1 * curl-7.66.0-150200.4.84.1 ## References: * https://www.suse.com/security/cve/CVE-2025-0167.html * https://www.suse.com/security/cve/CVE-2025-0725.html * https://bugzilla.suse.com/show_bug.cgi?id=1236588 * https://bugzilla.suse.com/show_bug.cgi?id=1236590 . SUSE releases patches for wget targeting vulnerabilities of moderate risk. Key updates issued for impacted installations.. curl security update,SUSE curl advisory,moderate severity patch,SUSE Linux security. . LinuxSecurity.com Team

Calendar 2 Feb 06, 2025 SuSE
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here