Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 492
Alerts This Week
Warning Icon 1 492

Stay Secure with the Latest Linux Advisories

Debian Large Esm H800
Debian

Debian Linux Major Privilege Escalation Denial of Service Issues DSA-6393-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE 2026-3139-1 sssd Important Privilege Escalation and Bypass

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE LibreOffice Important Security Issues and Updates 2026-3140-1

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H800
Ubuntu

Ubuntu 20.04 Linux Kernel Critical Privilege Escalation Issues USN-8576-1

Calendar White Jul 21, 2026
Critical
Ubuntu Large Esm H900
Ubuntu

Ubuntu 22.04 Linux Kernel Critical Issues Addressed USN-8575-1

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 24.04 LTS Linux-GCP FIPS Major Threat Update 2026-8574-1

Calendar White Jul 21, 2026
Critical
Rockylinux Esm H800
Rocky

Rocky Linux webkit2gtk3 Important Security Issues RLSA-2026-42088

Calendar White Jul 21, 2026
Important
Rockylinux Esm H900
Rocky

Rocky Linux glib2 Important Integer Underflow Threat RLSA-2026-42090

Calendar White Jul 21, 2026
Important
Debianlts Large Esm H900
Debian LTS

Debian LTS Samba Important Access Bypass Denial of Service DLA-4692-1

Calendar White Jul 21, 2026
Important
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 9 articles for you...
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorymoderateutil-linux

openSUSE Memory Security Issue - Util-linux Advisory 2026-0510-2 Risk

An update that solves one vulnerability and contains one feature can now be installed.. # Security update for util-linux Announcement ID: SUSE-SU-2026:0510-1 Release Date: 2026-02-13T14:52:46Z Rating: moderate References: * bsc#1254666 * jsc#PED-13682 Cross-References: * CVE-2025-14104 CVSS scores: * CVE-2025-14104 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-14104 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2025-14104 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 An update that solves one vulnerability and contains one feature can now be installed. ## Description: This update for util-linux fixes the following issues: * CVE-2025-14104: Fixed heap buffer overread in setpwnam() when processing 256-byte usernames (bsc#1254666). * lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-510=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-510=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-510=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-510=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-510=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * libuuid-devel-2.37.2-150400.8.38.1 * python3-libmount-debugsource-2.37.2-150400.8.38.1 * util-linux-systemd-2.37.2-150400.8.38.1 *util-linux-debuginfo-2.37.2-150400.8.38.1 * util-linux-debugsource-2.37.2-150400.8.38.1 * libfdisk1-2.37.2-150400.8.38.1 * libsmartcols1-debuginfo-2.37.2-150400.8.38.1 * util-linux-systemd-debugsource-2.37.2-150400.8.38.1 * libmount-devel-static-2.37.2-150400.8.38.1 * libblkid-devel-static-2.37.2-150400.8.38.1 * libblkid1-2.37.2-150400.8.38.1 * libsmartcols1-2.37.2-150400.8.38.1 * libfdisk-devel-2.37.2-150400.8.38.1 * libuuid1-2.37.2-150400.8.38.1 * libfdisk1-debuginfo-2.37.2-150400.8.38.1 * libblkid-devel-2.37.2-150400.8.38.1 * libsmartcols-devel-static-2.37.2-150400.8.38.1 * python3-libmount-debuginfo-2.37.2-150400.8.38.1 * libblkid1-debuginfo-2.37.2-150400.8.38.1 * libfdisk-devel-static-2.37.2-150400.8.38.1 * libuuid1-debuginfo-2.37.2-150400.8.38.1 * uuidd-debuginfo-2.37.2-150400.8.38.1 * libuuid-devel-static-2.37.2-150400.8.38.1 * python3-libmount-2.37.2-150400.8.38.1 * util-linux-systemd-debuginfo-2.37.2-150400.8.38.1 * libmount-devel-2.37.2-150400.8.38.1 * libmount1-2.37.2-150400.8.38.1 * uuidd-2.37.2-150400.8.38.1 * libsmartcols-devel-2.37.2-150400.8.38.1 * libmount1-debuginfo-2.37.2-150400.8.38.1 * util-linux-2.37.2-150400.8.38.1 * openSUSE Leap 15.4 (x86_64) * libmount1-32bit-debuginfo-2.37.2-150400.8.38.1 * libsmartcols1-32bit-debuginfo-2.37.2-150400.8.38.1 * libmount1-32bit-2.37.2-150400.8.38.1 * libfdisk1-32bit-debuginfo-2.37.2-150400.8.38.1 * libblkid-devel-32bit-2.37.2-150400.8.38.1 * libfdisk-devel-32bit-2.37.2-150400.8.38.1 * libuuid-devel-32bit-2.37.2-150400.8.38.1 * libuuid1-32bit-debuginfo-2.37.2-150400.8.38.1 * libblkid1-32bit-2.37.2-150400.8.38.1 * libmount-devel-32bit-2.37.2-150400.8.38.1 * libblkid1-32bit-debuginfo-2.37.2-150400.8.38.1 * libuuid1-32bit-2.37.2-150400.8.38.1 * libfdisk1-32bit-2.37.2-150400.8.38.1 * libsmartcols1-32bit-2.37.2-150400.8.38.1 * libsmartcols-devel-32bit-2.37.2-150400.8.38.1 * openSUSE Leap 15.4(noarch) * util-linux-lang-2.37.2-150400.8.38.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libuuid-devel-64bit-2.37.2-150400.8.38.1 * libblkid-devel-64bit-2.37.2-150400.8.38.1 * libmount1-64bit-debuginfo-2.37.2-150400.8.38.1 * libuuid1-64bit-debuginfo-2.37.2-150400.8.38.1 * libmount-devel-64bit-2.37.2-150400.8.38.1 * libuuid1-64bit-2.37.2-150400.8.38.1 * libmount1-64bit-2.37.2-150400.8.38.1 * libfdisk1-64bit-debuginfo-2.37.2-150400.8.38.1 * libfdisk1-64bit-2.37.2-150400.8.38.1 * libsmartcols1-64bit-2.37.2-150400.8.38.1 * libblkid1-64bit-2.37.2-150400.8.38.1 * libsmartcols1-64bit-debuginfo-2.37.2-150400.8.38.1 * libblkid1-64bit-debuginfo-2.37.2-150400.8.38.1 * libfdisk-devel-64bit-2.37.2-150400.8.38.1 * libsmartcols-devel-64bit-2.37.2-150400.8.38.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libsmartcols1-debuginfo-2.37.2-150400.8.38.1 * util-linux-systemd-debugsource-2.37.2-150400.8.38.1 * libblkid1-debuginfo-2.37.2-150400.8.38.1 * libmount1-debuginfo-2.37.2-150400.8.38.1 * util-linux-debuginfo-2.37.2-150400.8.38.1 * util-linux-systemd-2.37.2-150400.8.38.1 * libblkid1-2.37.2-150400.8.38.1 * libsmartcols1-2.37.2-150400.8.38.1 * libuuid1-debuginfo-2.37.2-150400.8.38.1 * util-linux-debugsource-2.37.2-150400.8.38.1 * libmount1-2.37.2-150400.8.38.1 * libuuid1-2.37.2-150400.8.38.1 * libfdisk1-debuginfo-2.37.2-150400.8.38.1 * libfdisk1-2.37.2-150400.8.38.1 * util-linux-2.37.2-150400.8.38.1 * util-linux-systemd-debuginfo-2.37.2-150400.8.38.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libsmartcols1-debuginfo-2.37.2-150400.8.38.1 * util-linux-systemd-debugsource-2.37.2-150400.8.38.1 * libblkid1-debuginfo-2.37.2-150400.8.38.1 * libmount1-debuginfo-2.37.2-150400.8.38.1 * util-linux-debuginfo-2.37.2-150400.8.38.1 * util-linux-systemd-2.37.2-150400.8.38.1 * libblkid1-2.37.2-150400.8.38.1 * libsmartcols1-2.37.2-150400.8.38.1 * libuuid1-debuginfo-2.37.2-150400.8.38.1 * util-linux-debugsource-2.37.2-150400.8.38.1 * libmount1-2.37.2-150400.8.38.1 * libuuid1-2.37.2-150400.8.38.1 * libfdisk1-debuginfo-2.37.2-150400.8.38.1 * libfdisk1-2.37.2-150400.8.38.1 * util-linux-2.37.2-150400.8.38.1 * util-linux-systemd-debuginfo-2.37.2-150400.8.38.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libsmartcols1-debuginfo-2.37.2-150400.8.38.1 * util-linux-systemd-debugsource-2.37.2-150400.8.38.1 * libblkid1-debuginfo-2.37.2-150400.8.38.1 * libmount1-debuginfo-2.37.2-150400.8.38.1 * util-linux-debuginfo-2.37.2-150400.8.38.1 * util-linux-systemd-2.37.2-150400.8.38.1 * libblkid1-2.37.2-150400.8.38.1 * libsmartcols1-2.37.2-150400.8.38.1 * libuuid1-debuginfo-2.37.2-150400.8.38.1 * util-linux-debugsource-2.37.2-150400.8.38.1 * libmount1-2.37.2-150400.8.38.1 * libuuid1-2.37.2-150400.8.38.1 * libfdisk1-debuginfo-2.37.2-150400.8.38.1 * libfdisk1-2.37.2-150400.8.38.1 * util-linux-2.37.2-150400.8.38.1 * util-linux-systemd-debuginfo-2.37.2-150400.8.38.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libsmartcols1-debuginfo-2.37.2-150400.8.38.1 * util-linux-systemd-debugsource-2.37.2-150400.8.38.1 * libblkid1-debuginfo-2.37.2-150400.8.38.1 * libmount1-debuginfo-2.37.2-150400.8.38.1 * util-linux-debuginfo-2.37.2-150400.8.38.1 * util-linux-systemd-2.37.2-150400.8.38.1 * libblkid1-2.37.2-150400.8.38.1 * libsmartcols1-2.37.2-150400.8.38.1 * libuuid1-debuginfo-2.37.2-150400.8.38.1 * util-linux-debugsource-2.37.2-150400.8.38.1 * libmount1-2.37.2-150400.8.38.1 * libuuid1-2.37.2-150400.8.38.1 * libfdisk1-debuginfo-2.37.2-150400.8.38.1 * libfdisk1-2.37.2-150400.8.38.1 * util-linux-2.37.2-150400.8.38.1 * util-linux-systemd-debuginfo-2.37.2-150400.8.38.1 ## References: * https://www.suse.com/security/cve/CVE-2025-14104.html *https://bugzilla.suse.com/show_bug.cgi?id=1254666 * https://jira.suse.com/browse/PED-13682 . Update for util-linux addresses heap buffer overread issue in openSUSE, rated as moderate severity.. openSUSE security, util-linux update, heap buffer overread. . LinuxSecurity.com Team

Calendar%202 Feb 13, 2026 SuSE
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisorymoderatebuffer overflow

openSUSE Leap 15.6: util-linux Moderate Heap Buffer Overread 2026:0115-1

An update that solves one vulnerability and contains one feature can now be installed.. # Security update for util-linux Announcement ID: SUSE-SU-2026:0115-1 Release Date: 2026-01-12T15:03:44Z Rating: moderate References: * bsc#1254666 * jsc#PED-13682 Cross-References: * CVE-2025-14104 CVSS scores: * CVE-2025-14104 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-14104 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2025-14104 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H Affected Products: * openSUSE Leap 15.6 An update that solves one vulnerability and contains one feature can now be installed. ## Description: This update for util-linux fixes the following issues: * CVE-2025-14104: Fixed heap buffer overread in setpwnam() when processing 256-byte usernames (bsc#1254666). * lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-115=1 openSUSE-SLE-15.6-2026-115=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libmount1-2.39.3-150600.4.15.1 * libblkid-devel-2.39.3-150600.4.15.1 * libfdisk-devel-static-2.39.3-150600.4.15.1 * libuuid-devel-static-2.39.3-150600.4.15.1 * python3-libmount-debuginfo-2.39.3-150600.4.15.1 * libmount1-debuginfo-2.39.3-150600.4.15.1 * libsmartcols-devel-static-2.39.3-150600.4.15.1 * uuidd-2.39.3-150600.4.15.1 * libsmartcols1-2.39.3-150600.4.15.1 * util-linux-systemd-debugsource-2.39.3-150600.4.15.1 * libfdisk1-debuginfo-2.39.3-150600.4.15.1 * libfdisk1-2.39.3-150600.4.15.1 * libsmartcols-devel-2.39.3-150600.4.15.1 * libblkid1-debuginfo-2.39.3-150600.4.15.1 *util-linux-tty-tools-2.39.3-150600.4.15.1 * libblkid-devel-static-2.39.3-150600.4.15.1 * libfdisk-devel-2.39.3-150600.4.15.1 * uuidd-debuginfo-2.39.3-150600.4.15.1 * libuuid-devel-2.39.3-150600.4.15.1 * util-linux-2.39.3-150600.4.15.1 * util-linux-tty-tools-debuginfo-2.39.3-150600.4.15.1 * libmount-devel-static-2.39.3-150600.4.15.1 * libblkid1-2.39.3-150600.4.15.1 * libmount-devel-2.39.3-150600.4.15.1 * util-linux-debuginfo-2.39.3-150600.4.15.1 * util-linux-debugsource-2.39.3-150600.4.15.1 * libuuid1-2.39.3-150600.4.15.1 * util-linux-systemd-2.39.3-150600.4.15.1 * util-linux-systemd-debuginfo-2.39.3-150600.4.15.1 * libsmartcols1-debuginfo-2.39.3-150600.4.15.1 * python3-libmount-2.39.3-150600.4.15.1 * libuuid1-debuginfo-2.39.3-150600.4.15.1 * python-libmount-debugsource-2.39.3-150600.4.15.1 * openSUSE Leap 15.6 (x86_64) * libblkid1-32bit-debuginfo-2.39.3-150600.4.15.1 * libfdisk1-32bit-debuginfo-2.39.3-150600.4.15.1 * libmount1-32bit-debuginfo-2.39.3-150600.4.15.1 * libsmartcols-devel-32bit-2.39.3-150600.4.15.1 * libuuid-devel-32bit-2.39.3-150600.4.15.1 * libblkid-devel-32bit-2.39.3-150600.4.15.1 * libfdisk-devel-32bit-2.39.3-150600.4.15.1 * libuuid1-32bit-2.39.3-150600.4.15.1 * libsmartcols1-32bit-debuginfo-2.39.3-150600.4.15.1 * libmount1-32bit-2.39.3-150600.4.15.1 * libsmartcols1-32bit-2.39.3-150600.4.15.1 * libuuid1-32bit-debuginfo-2.39.3-150600.4.15.1 * libblkid1-32bit-2.39.3-150600.4.15.1 * libfdisk1-32bit-2.39.3-150600.4.15.1 * libmount-devel-32bit-2.39.3-150600.4.15.1 * openSUSE Leap 15.6 (noarch) * util-linux-lang-2.39.3-150600.4.15.1 * openSUSE Leap 15.6 (s390x) * util-linux-extra-debuginfo-2.39.3-150600.4.15.1 * util-linux-extra-2.39.3-150600.4.15.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libblkid-devel-64bit-2.39.3-150600.4.15.1 * libblkid1-64bit-2.39.3-150600.4.15.1 * libfdisk1-64bit-debuginfo-2.39.3-150600.4.15.1 *libsmartcols1-64bit-2.39.3-150600.4.15.1 * libfdisk-devel-64bit-2.39.3-150600.4.15.1 * libsmartcols1-64bit-debuginfo-2.39.3-150600.4.15.1 * libuuid-devel-64bit-2.39.3-150600.4.15.1 * libuuid1-64bit-2.39.3-150600.4.15.1 * libmount1-64bit-debuginfo-2.39.3-150600.4.15.1 * libfdisk1-64bit-2.39.3-150600.4.15.1 * libmount-devel-64bit-2.39.3-150600.4.15.1 * libmount1-64bit-2.39.3-150600.4.15.1 * libblkid1-64bit-debuginfo-2.39.3-150600.4.15.1 * libsmartcols-devel-64bit-2.39.3-150600.4.15.1 * libuuid1-64bit-debuginfo-2.39.3-150600.4.15.1 ## References: * https://www.suse.com/security/cve/CVE-2025-14104.html * https://bugzilla.suse.com/show_bug.cgi?id=1254666 * https://jira.suse.com/browse/PED-13682 . Update for util-linux addresses heap buffer overread issue related to usernames, rated as moderate severity.. openSUSE util-linux buffer overread security update. . LinuxSecurity.com Team

Calendar%202 Jan 12, 2026 OpenSUSE
Banner 4 1028x280 1708121825 1771600306
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorybuffer overflowSuSE

SUSE: gnutls Important Buffer Overflow Fix Advisory CVE-2025-32988

* bsc#1246232 * bsc#1246233 * bsc#1246267 * bsc#1246299 . # Security update for gnutls Announcement ID: SUSE-SU-2025:20563-1 Release Date: 2025-08-20T11:49:18Z Rating: important References: * bsc#1246232 * bsc#1246233 * bsc#1246267 * bsc#1246299 Cross-References: * CVE-2025-32988 * CVE-2025-32989 * CVE-2025-32990 * CVE-2025-6395 CVSS scores: * CVE-2025-32988 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-32988 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-32988 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2025-32988 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2025-32989 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-32989 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2025-32989 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2025-32990 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2025-32990 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2025-32990 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2025-32990 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2025-6395 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-6395 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-6395 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves four vulnerabilities can now be installed. ## Description: This update for gnutls fixes the following issues: * CVE-2025-32988: Fixed double-free due to incorrect ownership handling (bsc#1246232) * CVE-2025-32989: Fixed heap buffer overread during X.509 certificate parsing (bsc#1246233) * CVE-2025-32990: Fixed 1-byte heap buffer overflow when parsing templates with certtool(bsc#1246267) * CVE-2025-6395: Fixed NULL pointer dereference when 2nd Client Hello omits PSK (bsc#1246299) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-426=1 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * libgnutls30-3.8.3-4.1 * gnutls-debuginfo-3.8.3-4.1 * gnutls-debugsource-3.8.3-4.1 * gnutls-3.8.3-4.1 * libgnutls30-debuginfo-3.8.3-4.1 ## References: * https://www.suse.com/security/cve/CVE-2025-32988.html * https://www.suse.com/security/cve/CVE-2025-32989.html * https://www.suse.com/security/cve/CVE-2025-32990.html * https://www.suse.com/security/cve/CVE-2025-6395.html * https://bugzilla.suse.com/show_bug.cgi?id=1246232 * https://bugzilla.suse.com/show_bug.cgi?id=1246233 * https://bugzilla.suse.com/show_bug.cgi?id=1246267 * https://bugzilla.suse.com/show_bug.cgi?id=1246299 . Critical security updates for gnutls in SUSE have been released, addressing multiple vulnerabilities. Prompt installation is recommended to maintain system integrity and guard against threats. SUSE update gnutls vulnerabilities security fix. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Aug 28, 2025 •Important SuSE
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisorybuffer overflowimportant

openSUSE Leap 15.4: gnutls Important Heap Overflow Fix 2025:02589-1

An update that solves four vulnerabilities can now be installed.. # Security update for gnutls Announcement ID: SUSE-SU-2025:02589-1 Release Date: 2025-08-01T13:06:32Z Rating: important References: * bsc#1246232 * bsc#1246233 * bsc#1246267 * bsc#1246299 Cross-References: * CVE-2025-32988 * CVE-2025-32989 * CVE-2025-32990 * CVE-2025-6395 CVSS scores: * CVE-2025-32988 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-32988 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-32988 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2025-32989 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-32989 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2025-32989 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2025-32990 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2025-32990 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2025-32990 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2025-6395 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-6395 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-6395 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves four vulnerabilities can now be installed. ## Description: This update for gnutls fixes the following issues: * CVE-2025-6395: Fix NULL pointer dereference when 2nd Client Hello omits PSK (bsc#1246299) * CVE-2025-32988: Fix double-free due to incorrect ownership handling in the export logic of SAN entries containing an otherName (bsc#1246232) * CVE-2025-32989: Fix heap buffer overread when handling the CT SCT extension during X.509 certificate parsing (bsc#1246233) * CVE-2025-32990: Fix 1-byte heap buffer overflow when parsing templates with certtool (bsc#1246267) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-2589=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-2589=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-2589=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-2589=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-2589=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-2589=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-2589=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patchSUSE-SLE-Product-HPC-15-SP5-LTSS-2025-2589=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-2589=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-2589=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2025-2589=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-2589=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2025-2589=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2025-2589=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2025-2589=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * gnutls-debugsource-3.7.3-150400.4.50.1 * libgnutls30-hmac-3.7.3-150400.4.50.1 * libgnutls30-debuginfo-3.7.3-150400.4.50.1 * gnutls-guile-debuginfo-3.7.3-150400.4.50.1 * libgnutls-devel-3.7.3-150400.4.50.1 * libgnutlsxx-devel-3.7.3-150400.4.50.1 * libgnutlsxx28-3.7.3-150400.4.50.1 * gnutls-debuginfo-3.7.3-150400.4.50.1 * gnutls-guile-3.7.3-150400.4.50.1 * libgnutls30-3.7.3-150400.4.50.1 * gnutls-3.7.3-150400.4.50.1 * libgnutlsxx28-debuginfo-3.7.3-150400.4.50.1 * openSUSE Leap 15.4 (x86_64) * libgnutls-devel-32bit-3.7.3-150400.4.50.1 * libgnutls30-32bit-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-hmac-32bit-3.7.3-150400.4.50.1 * libgnutls30-32bit-3.7.3-150400.4.50.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libgnutls30-64bit-debuginfo-3.7.3-150400.4.50.1 * libgnutls-devel-64bit-3.7.3-150400.4.50.1 * libgnutls30-hmac-64bit-3.7.3-150400.4.50.1 * libgnutls30-64bit-3.7.3-150400.4.50.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) *gnutls-debugsource-3.7.3-150400.4.50.1 * libgnutls30-hmac-3.7.3-150400.4.50.1 * libgnutls30-debuginfo-3.7.3-150400.4.50.1 * gnutls-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-3.7.3-150400.4.50.1 * gnutls-3.7.3-150400.4.50.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * gnutls-debugsource-3.7.3-150400.4.50.1 * libgnutls30-hmac-3.7.3-150400.4.50.1 * libgnutls30-debuginfo-3.7.3-150400.4.50.1 * gnutls-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-3.7.3-150400.4.50.1 * gnutls-3.7.3-150400.4.50.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * gnutls-debugsource-3.7.3-150400.4.50.1 * libgnutls30-hmac-3.7.3-150400.4.50.1 * libgnutls30-debuginfo-3.7.3-150400.4.50.1 * gnutls-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-3.7.3-150400.4.50.1 * gnutls-3.7.3-150400.4.50.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * gnutls-debugsource-3.7.3-150400.4.50.1 * libgnutls30-hmac-3.7.3-150400.4.50.1 * libgnutls30-debuginfo-3.7.3-150400.4.50.1 * libgnutls-devel-3.7.3-150400.4.50.1 * libgnutlsxx-devel-3.7.3-150400.4.50.1 * libgnutlsxx28-3.7.3-150400.4.50.1 * gnutls-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-3.7.3-150400.4.50.1 * gnutls-3.7.3-150400.4.50.1 * libgnutlsxx28-debuginfo-3.7.3-150400.4.50.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * libgnutls30-32bit-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-hmac-32bit-3.7.3-150400.4.50.1 * libgnutls30-32bit-3.7.3-150400.4.50.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * gnutls-debugsource-3.7.3-150400.4.50.1 * libgnutls30-hmac-3.7.3-150400.4.50.1 * libgnutls30-debuginfo-3.7.3-150400.4.50.1 * libgnutls-devel-3.7.3-150400.4.50.1 * libgnutlsxx-devel-3.7.3-150400.4.50.1 * libgnutlsxx28-3.7.3-150400.4.50.1 * gnutls-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-3.7.3-150400.4.50.1 *gnutls-3.7.3-150400.4.50.1 * libgnutlsxx28-debuginfo-3.7.3-150400.4.50.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * libgnutls30-32bit-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-hmac-32bit-3.7.3-150400.4.50.1 * libgnutls30-32bit-3.7.3-150400.4.50.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * gnutls-debugsource-3.7.3-150400.4.50.1 * libgnutls30-hmac-3.7.3-150400.4.50.1 * libgnutls30-debuginfo-3.7.3-150400.4.50.1 * gnutls-guile-debuginfo-3.7.3-150400.4.50.1 * libgnutls-devel-3.7.3-150400.4.50.1 * libgnutlsxx-devel-3.7.3-150400.4.50.1 * libgnutlsxx28-3.7.3-150400.4.50.1 * gnutls-debuginfo-3.7.3-150400.4.50.1 * gnutls-guile-3.7.3-150400.4.50.1 * libgnutls30-3.7.3-150400.4.50.1 * gnutls-3.7.3-150400.4.50.1 * libgnutlsxx28-debuginfo-3.7.3-150400.4.50.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (x86_64) * libgnutls30-32bit-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-hmac-32bit-3.7.3-150400.4.50.1 * libgnutls30-32bit-3.7.3-150400.4.50.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * gnutls-debugsource-3.7.3-150400.4.50.1 * libgnutls30-hmac-3.7.3-150400.4.50.1 * libgnutls30-debuginfo-3.7.3-150400.4.50.1 * gnutls-guile-debuginfo-3.7.3-150400.4.50.1 * libgnutls-devel-3.7.3-150400.4.50.1 * libgnutlsxx-devel-3.7.3-150400.4.50.1 * libgnutlsxx28-3.7.3-150400.4.50.1 * gnutls-debuginfo-3.7.3-150400.4.50.1 * gnutls-guile-3.7.3-150400.4.50.1 * libgnutls30-3.7.3-150400.4.50.1 * gnutls-3.7.3-150400.4.50.1 * libgnutlsxx28-debuginfo-3.7.3-150400.4.50.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (x86_64) * libgnutls30-32bit-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-hmac-32bit-3.7.3-150400.4.50.1 * libgnutls30-32bit-3.7.3-150400.4.50.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) *gnutls-debugsource-3.7.3-150400.4.50.1 * libgnutls30-hmac-3.7.3-150400.4.50.1 * libgnutls30-debuginfo-3.7.3-150400.4.50.1 * libgnutls-devel-3.7.3-150400.4.50.1 * libgnutlsxx-devel-3.7.3-150400.4.50.1 * libgnutlsxx28-3.7.3-150400.4.50.1 * gnutls-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-3.7.3-150400.4.50.1 * gnutls-3.7.3-150400.4.50.1 * libgnutlsxx28-debuginfo-3.7.3-150400.4.50.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (x86_64) * libgnutls30-32bit-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-hmac-32bit-3.7.3-150400.4.50.1 * libgnutls30-32bit-3.7.3-150400.4.50.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * gnutls-debugsource-3.7.3-150400.4.50.1 * libgnutls30-hmac-3.7.3-150400.4.50.1 * libgnutls30-debuginfo-3.7.3-150400.4.50.1 * gnutls-guile-debuginfo-3.7.3-150400.4.50.1 * libgnutls-devel-3.7.3-150400.4.50.1 * libgnutlsxx-devel-3.7.3-150400.4.50.1 * libgnutlsxx28-3.7.3-150400.4.50.1 * gnutls-debuginfo-3.7.3-150400.4.50.1 * gnutls-guile-3.7.3-150400.4.50.1 * libgnutls30-3.7.3-150400.4.50.1 * gnutls-3.7.3-150400.4.50.1 * libgnutlsxx28-debuginfo-3.7.3-150400.4.50.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (x86_64) * libgnutls30-32bit-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-hmac-32bit-3.7.3-150400.4.50.1 * libgnutls30-32bit-3.7.3-150400.4.50.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * gnutls-debugsource-3.7.3-150400.4.50.1 * libgnutls30-hmac-3.7.3-150400.4.50.1 * libgnutls30-debuginfo-3.7.3-150400.4.50.1 * libgnutls-devel-3.7.3-150400.4.50.1 * libgnutlsxx-devel-3.7.3-150400.4.50.1 * libgnutlsxx28-3.7.3-150400.4.50.1 * gnutls-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-3.7.3-150400.4.50.1 * gnutls-3.7.3-150400.4.50.1 * libgnutlsxx28-debuginfo-3.7.3-150400.4.50.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * libgnutls30-32bit-debuginfo-3.7.3-150400.4.50.1 *libgnutls30-hmac-32bit-3.7.3-150400.4.50.1 * libgnutls30-32bit-3.7.3-150400.4.50.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * gnutls-debugsource-3.7.3-150400.4.50.1 * libgnutls30-hmac-3.7.3-150400.4.50.1 * libgnutls30-debuginfo-3.7.3-150400.4.50.1 * gnutls-guile-debuginfo-3.7.3-150400.4.50.1 * libgnutls-devel-3.7.3-150400.4.50.1 * libgnutlsxx-devel-3.7.3-150400.4.50.1 * libgnutlsxx28-3.7.3-150400.4.50.1 * gnutls-debuginfo-3.7.3-150400.4.50.1 * gnutls-guile-3.7.3-150400.4.50.1 * libgnutls30-3.7.3-150400.4.50.1 * gnutls-3.7.3-150400.4.50.1 * libgnutlsxx28-debuginfo-3.7.3-150400.4.50.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (x86_64) * libgnutls30-32bit-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-hmac-32bit-3.7.3-150400.4.50.1 * libgnutls30-32bit-3.7.3-150400.4.50.1 * SUSE Manager Proxy 4.3 (x86_64) * gnutls-debugsource-3.7.3-150400.4.50.1 * libgnutls30-32bit-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-hmac-3.7.3-150400.4.50.1 * libgnutls30-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-hmac-32bit-3.7.3-150400.4.50.1 * libgnutls-devel-3.7.3-150400.4.50.1 * libgnutls30-32bit-3.7.3-150400.4.50.1 * libgnutlsxx-devel-3.7.3-150400.4.50.1 * libgnutlsxx28-3.7.3-150400.4.50.1 * gnutls-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-3.7.3-150400.4.50.1 * gnutls-3.7.3-150400.4.50.1 * libgnutlsxx28-debuginfo-3.7.3-150400.4.50.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * gnutls-debugsource-3.7.3-150400.4.50.1 * libgnutls30-32bit-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-hmac-3.7.3-150400.4.50.1 * libgnutls30-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-hmac-32bit-3.7.3-150400.4.50.1 * libgnutls-devel-3.7.3-150400.4.50.1 * libgnutls30-32bit-3.7.3-150400.4.50.1 * libgnutlsxx-devel-3.7.3-150400.4.50.1 * libgnutlsxx28-3.7.3-150400.4.50.1 * gnutls-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-3.7.3-150400.4.50.1 * gnutls-3.7.3-150400.4.50.1 * libgnutlsxx28-debuginfo-3.7.3-150400.4.50.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * gnutls-debugsource-3.7.3-150400.4.50.1 * libgnutls30-hmac-3.7.3-150400.4.50.1 * libgnutls30-debuginfo-3.7.3-150400.4.50.1 * libgnutls-devel-3.7.3-150400.4.50.1 * libgnutlsxx-devel-3.7.3-150400.4.50.1 * libgnutlsxx28-3.7.3-150400.4.50.1 * gnutls-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-3.7.3-150400.4.50.1 * gnutls-3.7.3-150400.4.50.1 * libgnutlsxx28-debuginfo-3.7.3-150400.4.50.1 * SUSE Manager Server 4.3 (x86_64) * libgnutls30-32bit-debuginfo-3.7.3-150400.4.50.1 * libgnutls30-hmac-32bit-3.7.3-150400.4.50.1 * libgnutls30-32bit-3.7.3-150400.4.50.1 ## References: * https://www.suse.com/security/cve/CVE-2025-32988.html * https://www.suse.com/security/cve/CVE-2025-32989.html * https://www.suse.com/security/cve/CVE-2025-32990.html * https://www.suse.com/security/cve/CVE-2025-6395.html * https://bugzilla.suse.com/show_bug.cgi?id=1246232 * https://bugzilla.suse.com/show_bug.cgi?id=1246233 * https://bugzilla.suse.com/show_bug.cgi?id=1246267 * https://bugzilla.suse.com/show_bug.cgi?id=1246299 . An important security patch for gnutls in openSUSE resolves various issues, enhancing your system's protection.. openSUSE security update, gnutls vulnerabilities, Linux patch management. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Aug 01, 2025 •Important OpenSUSE
Banner 4 1028x280 1708121825 1771600306
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorybuffer overflowSuSE

SUSE: Critical Security Update for gnutls CVE-2025-32988 Vulnerabilities

* bsc#1246232 * bsc#1246233 * bsc#1246267 * bsc#1246299 . # Security update for gnutls Announcement ID: SUSE-SU-2025:02595-1 Release Date: 2025-08-01T15:14:08Z Rating: important References: * bsc#1246232 * bsc#1246233 * bsc#1246267 * bsc#1246299 Cross-References: * CVE-2025-32988 * CVE-2025-32989 * CVE-2025-32990 * CVE-2025-6395 CVSS scores: * CVE-2025-32988 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-32988 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-32988 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2025-32989 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-32989 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2025-32989 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2025-32990 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2025-32990 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2025-32990 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2025-6395 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-6395 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-6395 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H Affected Products: * Basesystem Module 15-SP6 * Basesystem Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves four vulnerabilities can now be installed. ## Description: This update for gnutls fixes the following issues: *CVE-2025-6395: Fix NULL pointer dereference when 2nd Client Hello omits PSK (bsc#1246299) * CVE-2025-32988: Fix double-free due to incorrect ownership handling in the export logic of SAN entries containing an otherName (bsc#1246232) * CVE-2025-32989: Fix heap buffer overread when handling the CT SCT extension during X.509 certificate parsing (bsc#1246233) * CVE-2025-32990: Fix 1-byte heap buffer overflow when parsing templates with certtool (bsc#1246267) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-2595=1 openSUSE-SLE-15.6-2025-2595=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-2595=1 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2025-2595=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libgnutlsxx30-3.8.3-150600.4.9.1 * gnutls-debugsource-3.8.3-150600.4.9.1 * libgnutls-devel-3.8.3-150600.4.9.1 * libgnutlsxx-devel-3.8.3-150600.4.9.1 * gnutls-debuginfo-3.8.3-150600.4.9.1 * libgnutls30-debuginfo-3.8.3-150600.4.9.1 * libgnutls30-3.8.3-150600.4.9.1 * gnutls-3.8.3-150600.4.9.1 * libgnutlsxx30-debuginfo-3.8.3-150600.4.9.1 * openSUSE Leap 15.6 (x86_64) * libgnutls30-32bit-3.8.3-150600.4.9.1 * libgnutls-devel-32bit-3.8.3-150600.4.9.1 * libgnutls30-32bit-debuginfo-3.8.3-150600.4.9.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libgnutls30-64bit-3.8.3-150600.4.9.1 * libgnutls30-64bit-debuginfo-3.8.3-150600.4.9.1 * libgnutls-devel-64bit-3.8.3-150600.4.9.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libgnutlsxx30-3.8.3-150600.4.9.1 * gnutls-debugsource-3.8.3-150600.4.9.1 * libgnutls-devel-3.8.3-150600.4.9.1 * libgnutlsxx-devel-3.8.3-150600.4.9.1 *gnutls-debuginfo-3.8.3-150600.4.9.1 * libgnutls30-debuginfo-3.8.3-150600.4.9.1 * libgnutls30-3.8.3-150600.4.9.1 * gnutls-3.8.3-150600.4.9.1 * libgnutlsxx30-debuginfo-3.8.3-150600.4.9.1 * Basesystem Module 15-SP6 (x86_64) * libgnutls30-32bit-3.8.3-150600.4.9.1 * libgnutls30-32bit-debuginfo-3.8.3-150600.4.9.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libgnutlsxx30-3.8.3-150600.4.9.1 * gnutls-debugsource-3.8.3-150600.4.9.1 * libgnutls-devel-3.8.3-150600.4.9.1 * libgnutlsxx-devel-3.8.3-150600.4.9.1 * gnutls-debuginfo-3.8.3-150600.4.9.1 * libgnutls30-debuginfo-3.8.3-150600.4.9.1 * libgnutls30-3.8.3-150600.4.9.1 * gnutls-3.8.3-150600.4.9.1 * libgnutlsxx30-debuginfo-3.8.3-150600.4.9.1 * Basesystem Module 15-SP7 (x86_64) * libgnutls30-32bit-3.8.3-150600.4.9.1 * libgnutls30-32bit-debuginfo-3.8.3-150600.4.9.1 ## References: * https://www.suse.com/security/cve/CVE-2025-32988.html * https://www.suse.com/security/cve/CVE-2025-32989.html * https://www.suse.com/security/cve/CVE-2025-32990.html * https://www.suse.com/security/cve/CVE-2025-6395.html * https://bugzilla.suse.com/show_bug.cgi?id=1246232 * https://bugzilla.suse.com/show_bug.cgi?id=1246233 * https://bugzilla.suse.com/show_bug.cgi?id=1246267 * https://bugzilla.suse.com/show_bug.cgi?id=1246299 . Important security patch for OpenSSL resolving several weaknesses in Ubuntu Linux distributions. Ensure your devices are secure.. gnutls security update,SUSE important advisory,critical vulnerabilities patch,buffer overflow fix,heap overread vulnerability. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Aug 01, 2025 •Important SuSE
217
Ls Advisories Oracle Esm H240
Price Tag%201security advisorysecurity fixsecurity issues

Oracle Linux 7 ELSA-2024-2080 critical: tigervnc heap overread

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2024-2080 http://linux.oracle.com/errata/ELSA-2024-2080.html The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: aarch64: tigervnc-1.8.0-33.0.1.el7_9.aarch64.rpm tigervnc-icons-1.8.0-33.0.1.el7_9.noarch.rpm tigervnc-license-1.8.0-33.0.1.el7_9.noarch.rpm tigervnc-server-1.8.0-33.0.1.el7_9.aarch64.rpm tigervnc-server-minimal-1.8.0-33.0.1.el7_9.aarch64.rpm tigervnc-server-applet-1.8.0-33.0.1.el7_9.noarch.rpm tigervnc-server-module-1.8.0-33.0.1.el7_9.aarch64.rpm SRPMS: http://oss.oracle.com/ol7/SRPMS-updates//tigervnc-1.8.0-33.0.1.el7_9.src.rpm Related CVEs: CVE-2024-31080 CVE-2024-31081 CVE-2024-31083 Description of changes: [1.8.0-33.0.1] - Dropped xorg-CVE-2023-5367.patch, xorg-CVE-2023-6816.patch, xorg-CVE-2023-6377.patch, xorg-CVE-2023-6478.patch, xorg-CVE-2024-0229-1.patch, xorg-CVE-2024-0229-2.patch, xorg-CVE-2024-0229-3.patch, xorg-CVE-2024-21885.patch, xorg-CVE-2024-21886-1.patch, xorg-CVE-2024-21886-2.patch, xorg-dix-fix-use-after-free-in-input-device-shutdown.patch, xorg-CVE-2024-31080.patch, xorg-CVE-2024-31081.patch, xorg-CVE-2024-31082.patch, xorg-CVE-2024-31083.patch, xorg-CVE-2024-31083-followup.patch [1.8.0-33] - Fix crash caused by fix for CVE-2024-31083 Resolves: RHEL-30976 [1.8.0-32] - Fix CVE-2024-31080 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents Resolves: RHEL-31006 - Fix CVE-2024-31083 tigervnc: xorg-x11-server: User-after-free in ProcRenderAddGlyphs Resolves: RHEL-30976 - Fix CVE-2024-31081 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice Resolves: RHEL-30993 _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Oracle Linux 7 has rolled out updates for tigervnc to tackle significant security flaws andvulnerabilities. Discover additional improvements and features.. Tigervnc Security Advisory, Oracle Linux 7 Update, Heap Buffer Overread. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Apr 30, 2024 •Critical Oracle
Banner 4 1028x280 1708121825 1771600306
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryFedoracritical update

Fedora 38 2024-1706127797 Critical: Xwayland Issues and Fixes

CVE fix for CVE-2024-31080, CVE-2024-31081, CVE-2024-31083, and a fix for a regression introduced with the fix for CVE-2024-31083. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-1706127797 2024-04-24 01:36:11.409612 -------------------------------------------------------------------------------- Name : xorg-x11-server-Xwayland Product : Fedora 38 Version : 22.1.9 Release : 7.fc38 URL : https://www.x.org/wiki/ Summary : Xwayland Description : Xwayland is an X server for running X clients under Wayland. -------------------------------------------------------------------------------- Update Information: CVE fix for CVE-2024-31080, CVE-2024-31081, CVE-2024-31083, and a fix for a regression introduced with the fix for CVE-2024-31083 -------------------------------------------------------------------------------- ChangeLog: * Tue Apr 9 2024 Olivier Fourdan - 22.1.9-7 Fix for a regression introduced with the fix for CVE-2024-31083 https://gitlab.freedesktop.org/xorg/xserver/-/issues/1659 * Thu Apr 4 2024 Olivier Fourdan - 22.1.9-6 CVE fix for: CVE-2024-31080, CVE-2024-31081, CVE-2024-31083 Fix for copy/paste error in previous CVE fix Fix to enable buttons with pointer gestures for backward compatibility with legacy X11 clients. -------------------------------------------------------------------------------- References: [ 1 ] Bug #2271997 - CVE-2024-31080 xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents https://bugzilla.redhat.com/show_bug.cgi?id=2271997 [ 2 ] Bug #2271998 - CVE-2024-31081 xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice https://bugzilla.redhat.com/show_bug.cgi?id=2271998 [ 3 ] Bug #2272000 - CVE-2024-31083 xorg-x11-server: User-after-free in ProcRenderAddGlyphs https://bugzilla.redhat.com/show_bug.cgi?id=2272000 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-1706127797' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: . Fedora 38 patches for xorg-x11-server-Xwayland resolve vital security vulnerabilities, encompassing data exposure and compatibility problems.. Fedora Xwayland Security Update, Heap Overread Fix, Data Leakage Patch. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Apr 24, 2024 •Critical Fedora
99
Ls Advisories Slackware Esm H240
Price Tag%201security advisorymoderatesecurity issue

Slackware 15.0: 2024-096-01 Moderate: Tigervnc Heap Overread Issue

New tigervnc packages are available for Slackware 15.0 and -current to fix security issues. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] tigervnc (SSA:2024-096-01) New tigervnc packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: +--------------------------+ extra/tigervnc/tigervnc-1.12.0-i586-6_slack15.0.txz: Rebuilt. Recompiled against xorg-server-1.20.14, including the latest patches for several security issues: Heap buffer overread/data leakage in ProcXIGetSelectedEvents. Heap buffer overread/data leakage in ProcXIPassiveGrabDevice. Heap buffer overread/data leakage in ProcAppleDRICreatePixmap. Use-after-free in ProcRenderAddGlyphs. For more information, see: https://lists.x.org/archives/xorg-announce/2024-April/003497.html https://www.cve.org/CVERecord?id=CVE-2024-31080 https://www.cve.org/CVERecord?id=CVE-2024-31081 https://www.cve.org/CVERecord?id=CVE-2024-31082 https://www.cve.org/CVERecord?id=CVE-2024-31083 (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you. Updated package for Slackware 15.0: ftp://ftp.slackware.com/pub/slackware/slackware-15.0/extra/tigervnc/tigervnc-1.12.0-i586-6_slack15.0.txz Updated package for Slackware x86_64 15.0: ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/extra/tigervnc/tigervnc-1.12.0-x86_64-6_slack15.0.txz Updated package for Slackware -current: Updated packages for Slackware x86_64 -current: MD5 signatures: +-------------+ Slackware 15.0 package: 1b9d9300689d99dc01d93a13bd7ca5f5 tigervnc-1.12.0-i586-6_slack15.0.txz Slackware x86_64 15.0 package: 6b54b9fd74517d203dd671d1bd4adda4 tigervnc-1.12.0-x86_64-6_slack15.0.txz Slackware -current package: ec1ad0a545c495e4a3397db00969ce39 tigervnc-1.13.1-i586-5.txz Slackware x86_64 -current package: 489f6eaadacd1e56f4428dd7e4e5cb5d tigervnc-1.13.1-x86_64-5.txz Installation instructions: +------------------------+ Upgrade the package as root: # upgradepkg tigervnc-1.12.0-i586-6_slack15.0.txz +-----+ . The latest release of Tigervnc packages for Slackware addresses critical security vulnerabilities, notably fixing heap buffer overflows.. Slackware Update, Tigervnc Package, Security Fix, Heap Overread, Slackware Security. . LinuxSecurity.com Team

Calendar%202 Apr 05, 2024 Slackware
Banner 4 1028x280 1708121825 1771600306
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics