Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Can sandbox isolation stop malware?
Loading...
Explore Latest Linux Security advisories
We found 4,253 articles for you...
100
security advisorymoderate severityupdate instructionsSUSE: 2025:01884-1 moderate: perl-Crypt-OpenSSL-RSA side-channel attack
* bsc#1221446 Cross-References: * CVE-2024-2467 . # Security update for perl-Crypt-OpenSSL-RSA Announcement ID: SUSE-SU-2025:01884-1 Release Date: 2025-06-11T05:42:43Z Rating: moderate References: * bsc#1221446 Cross-References: * CVE-2024-2467 CVSS scores: * CVE-2024-2467 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * Basesystem Module 15-SP6 * Basesystem Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for perl-Crypt-OpenSSL-RSA fixes the following issues: * CVE-2024-2467: Side-channel attack in PKCS#1 v1.5 padding mode (Marvin Attack) (bsc#1221446) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-1884=1 openSUSE-SLE-15.6-2025-1884=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-1884=1 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2025-1884=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * perl-Crypt-OpenSSL-RSA-debugsource-0.28-150600.19.3.1 * perl-Crypt-OpenSSL-RSA-debuginfo-0.28-150600.19.3.1 * perl-Crypt-OpenSSL-RSA-0.28-150600.19.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * perl-Crypt-OpenSSL-RSA-debugsource-0.28-150600.19.3.1 * perl-Crypt-OpenSSL-RSA-debuginfo-0.28-150600.19.3.1 *perl-Crypt-OpenSSL-RSA-0.28-150600.19.3.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * perl-Crypt-OpenSSL-RSA-debugsource-0.28-150600.19.3.1 * perl-Crypt-OpenSSL-RSA-debuginfo-0.28-150600.19.3.1 * perl-Crypt-OpenSSL-RSA-0.28-150600.19.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-2467.html * https://bugzilla.suse.com/show_bug.cgi?id=1221446 . Important patch for perl-Crypt-OpenSSL-RSA mitigating a side-channel exploit risk in SUSE platforms.. perl-Crypt-OpenSSL-RSA Update, SUSE Security Advisory, Linux Security Fix, SUSE Vulnerability Patch. . LinuxSecurity.com Team
Jun 11, 2025
SuSE
100
security advisorymoderate severitySUSESUSE: 2025:01850-1 moderate: xen fixes for three issues
* bsc#1234282 * bsc#1238043 * bsc#1243117 Cross-References: . # Security update for xen Announcement ID: SUSE-SU-2025:01850-1 Release Date: 2025-06-10T01:33:37Z Rating: moderate References: * bsc#1234282 * bsc#1238043 * bsc#1243117 Cross-References: * CVE-2024-28956 * CVE-2024-53241 * CVE-2025-1713 CVSS scores: * CVE-2024-28956 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2024-28956 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2024-28956 ( NVD ): 5.7 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2024-28956 ( NVD ): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2024-53241 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2024-53241 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2025-1713 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H * CVE-2025-1713 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro for Rancher 5.2 An update that solves three vulnerabilities can now be installed. ## Description: This update for xen fixes the following issues: * CVE-2024-28956: Fixed Intel CPU: Indirect Target Selection (ITS) (XSA-469) (bsc#1243117) * CVE-2024-53241: Fixed Xen hypercall page unsafe against speculative attacks (XSA-466) (bsc#1234282) * CVE-2025-1713: Fixed deadlock potential with VT-d and legacy PCI device pass-through (XSA-467) (bsc#1238043) ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2025-1850=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2025-1850=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-1850=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-1850=1 ## Package List: * openSUSE Leap 15.3 (aarch64 x86_64 i586) * xen-libs-debuginfo-4.14.6_24-150300.3.87.1 * xen-devel-4.14.6_24-150300.3.87.1 * xen-debugsource-4.14.6_24-150300.3.87.1 * xen-tools-domU-4.14.6_24-150300.3.87.1 * xen-tools-domU-debuginfo-4.14.6_24-150300.3.87.1 * xen-libs-4.14.6_24-150300.3.87.1 * openSUSE Leap 15.3 (x86_64) * xen-libs-32bit-4.14.6_24-150300.3.87.1 * xen-libs-32bit-debuginfo-4.14.6_24-150300.3.87.1 * openSUSE Leap 15.3 (aarch64 x86_64) * xen-tools-4.14.6_24-150300.3.87.1 * xen-4.14.6_24-150300.3.87.1 * xen-tools-debuginfo-4.14.6_24-150300.3.87.1 * xen-doc-html-4.14.6_24-150300.3.87.1 * openSUSE Leap 15.3 (noarch) * xen-tools-xendomains-wait-disk-4.14.6_24-150300.3.87.1 * openSUSE Leap 15.3 (aarch64_ilp32) * xen-libs-64bit-debuginfo-4.14.6_24-150300.3.87.1 * xen-libs-64bit-4.14.6_24-150300.3.87.1 * SUSE Linux Enterprise Micro 5.1 (x86_64) * xen-debugsource-4.14.6_24-150300.3.87.1 * xen-libs-debuginfo-4.14.6_24-150300.3.87.1 * xen-libs-4.14.6_24-150300.3.87.1 * SUSE Linux Enterprise Micro 5.2 (x86_64) * xen-debugsource-4.14.6_24-150300.3.87.1 * xen-libs-debuginfo-4.14.6_24-150300.3.87.1 * xen-libs-4.14.6_24-150300.3.87.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (x86_64) * xen-debugsource-4.14.6_24-150300.3.87.1 * xen-libs-debuginfo-4.14.6_24-150300.3.87.1 * xen-libs-4.14.6_24-150300.3.87.1 ## References: * https://www.suse.com/security/cve/CVE-2024-28956.html * https://www.suse.com/security/cve/CVE-2024-53241.html *https://www.suse.com/security/cve/CVE-2025-1713.html * https://bugzilla.suse.com/show_bug.cgi?id=1234282 * https://bugzilla.suse.com/show_bug.cgi?id=1238043 * https://bugzilla.suse.com/show_bug.cgi?id=1243117 . Keep informed about the latest SUSE security bulletin addressing flaws in the Xen hypervisor and viable remediation strategies.. SUSE security advisory,xen vulnerabilities,moderate severity updates,openSUSE security. . LinuxSecurity.com Team
Jun 10, 2025
SuSE
202
security advisorysecurity issueupdateopenSUSE Tumbleweed: 2025:15201-1 moderate: python311-nh3 security fix
An update that solves one vulnerability can now be installed.. # python311-nh3-0.2.17-2.1 on GA media Announcement ID: openSUSE-SU-2025:15201-1 Rating: moderate Cross-References: * CVE-2024-12224 CVSS scores: * CVE-2024-12224 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2024-12224 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N Affected Products: * openSUSE Tumbleweed An update that solves one vulnerability can now be installed. ## Description: These are all security issues fixed in the python311-nh3-0.2.17-2.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * python311-nh3 0.2.17-2.1 * python312-nh3 0.2.17-2.1 * python313-nh3 0.2.17-2.1 ## References: * https://www.suse.com/security/cve/CVE-2024-12224.html . Recent patches for openSUSE Tumbleweed tackle notable security vulnerabilities in the python311-nh3 package, enhancing system resilience.. openSUSE security, python111-nh3 update, moderate security issues, openSUSE Tumbleweed. . LinuxSecurity.com Team
Jun 05, 2025
OpenSUSE
217
security advisorysecurity fixmoderate severityOracle Linux 8 ELSA-2025-8414 Moderate: Git Security Fix Overview
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-8414 http://linux.oracle.com/errata/ELSA-2025-8414.html The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: x86_64: git-2.43.5-3.el8_10.x86_64.rpm git-all-2.43.5-3.el8_10.noarch.rpm git-core-2.43.5-3.el8_10.x86_64.rpm git-core-doc-2.43.5-3.el8_10.noarch.rpm git-credential-libsecret-2.43.5-3.el8_10.x86_64.rpm git-daemon-2.43.5-3.el8_10.x86_64.rpm git-email-2.43.5-3.el8_10.noarch.rpm git-gui-2.43.5-3.el8_10.noarch.rpm git-instaweb-2.43.5-3.el8_10.noarch.rpm git-subtree-2.43.5-3.el8_10.x86_64.rpm git-svn-2.43.5-3.el8_10.noarch.rpm gitk-2.43.5-3.el8_10.noarch.rpm gitweb-2.43.5-3.el8_10.noarch.rpm perl-Git-2.43.5-3.el8_10.noarch.rpm perl-Git-SVN-2.43.5-3.el8_10.noarch.rpm aarch64: git-2.43.5-3.el8_10.aarch64.rpm git-all-2.43.5-3.el8_10.noarch.rpm git-core-2.43.5-3.el8_10.aarch64.rpm git-core-doc-2.43.5-3.el8_10.noarch.rpm git-credential-libsecret-2.43.5-3.el8_10.aarch64.rpm git-daemon-2.43.5-3.el8_10.aarch64.rpm git-email-2.43.5-3.el8_10.noarch.rpm git-gui-2.43.5-3.el8_10.noarch.rpm git-instaweb-2.43.5-3.el8_10.noarch.rpm git-subtree-2.43.5-3.el8_10.aarch64.rpm git-svn-2.43.5-3.el8_10.noarch.rpm gitk-2.43.5-3.el8_10.noarch.rpm gitweb-2.43.5-3.el8_10.noarch.rpm perl-Git-2.43.5-3.el8_10.noarch.rpm perl-Git-SVN-2.43.5-3.el8_10.noarch.rpm SRPMS: http://oss.oracle.com/ol8/SRPMS-updates//git-2.43.5-3.el8_10.src.rpm Related CVEs: CVE-2024-52005 Description of changes: [2.43.5-3] - add the option to sanitize sideband channel messages - Resolves: RHEL-74177 _______________________________________________ El-errata mailing list
Jun 05, 2025
Oracle
217
security advisorysecurity issuesoftware updateOracle Linux 9: ELSA-2025-8476 Moderate: golang Security Update
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-8476 http://linux.oracle.com/errata/ELSA-2025-8476.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: x86_64: go-toolset-1.23.9-1.el9_6.x86_64.rpm golang-1.23.9-1.el9_6.x86_64.rpm golang-bin-1.23.9-1.el9_6.x86_64.rpm golang-docs-1.23.9-1.el9_6.noarch.rpm golang-misc-1.23.9-1.el9_6.noarch.rpm golang-race-1.23.9-1.el9_6.x86_64.rpm golang-src-1.23.9-1.el9_6.noarch.rpm golang-tests-1.23.9-1.el9_6.noarch.rpm aarch64: go-toolset-1.23.9-1.el9_6.aarch64.rpm golang-1.23.9-1.el9_6.aarch64.rpm golang-bin-1.23.9-1.el9_6.aarch64.rpm golang-docs-1.23.9-1.el9_6.noarch.rpm golang-misc-1.23.9-1.el9_6.noarch.rpm golang-race-1.23.9-1.el9_6.aarch64.rpm golang-src-1.23.9-1.el9_6.noarch.rpm golang-tests-1.23.9-1.el9_6.noarch.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates//golang-1.23.9-1.el9_6.src.rpm Related CVEs: CVE-2025-22871 Description of changes: [1.23.9-1] - Update to Go 1.23.9 - Remove runtime-usleep-s390x.patch, already merged - Resolves: RHEL-93212 _______________________________________________ El-errata mailing list
Jun 05, 2025
Oracle
100
security advisorysoftware updatemoderate severitySUSE Linux Micro 6.0: 2025:20034-1 moderate: python-requests update
* bsc#1224788 Cross-References: * CVE-2024-35195 . # Security update for python-requests Announcement ID: SUSE-SU-2025:20034-1 Release Date: 2025-02-03T08:52:32Z Rating: moderate References: * bsc#1224788 Cross-References: * CVE-2024-35195 CVSS scores: * CVE-2024-35195 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N Affected Products: * SUSE Linux Micro 6.0 An update that solves one vulnerability can now be installed. ## Description: This update for python-requests fixes the following issues: * Update to 2.32.2 * To provide a more stable migration for custom HTTPAdapters impacted by the CVE changes in 2.32.0, we've renamed _get_connection to a new public API, get_connection_with_tls_context. Existing custom HTTPAdapters will need to migrate their code to use this new API. get_connection is considered deprecated in all versions of Requests> =2.32.0. * Update to 2.32.1 * Fixed an issue where setting verify=False on the first request from a Session will cause subsequent requests to the same origin to also ignore cert verification, regardless of the value of verify. (bsc#1224788, CVE-2024-35195) * verify=True now reuses a global SSLContext which should improve request time variance between first and subsequent requests. * Requests now supports optional use of character detection (chardet or charset_normalizer) when repackaged or vendored. This enables pip and other projects to minimize their vendoring surface area. * Requests has officially added support for CPython 3.12 and dropped support for CPython 3.7. * Starting in Requests 2.33.0, Requests will migrate to a PEP 517 build system using hatchling. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-28=1 ## PackageList: * SUSE Linux Micro 6.0 (noarch) * python311-requests-2.32.2-1.1 ## References: * https://www.suse.com/security/cve/CVE-2024-35195.html * https://bugzilla.suse.com/show_bug.cgi?id=1224788 . A security patch for python-requests has addressed concerns and vulnerabilities of moderate risk on SUSE Linux Micro.. SUSE Linux, python-requests update, security patch, CVE-2024-35195. . LinuxSecurity.com Team
Jun 04, 2025
SuSE
100
security advisorysecurity updatemoderate severitySUSE Linux Micro 6.0: 2025:20035-1 moderate: python-Jinja2 HTML injection
* bsc#1218722 * bsc#1223980 Cross-References: * CVE-2024-22195 . # Security update for python-Jinja2 Announcement ID: SUSE-SU-2025:20035-1 Release Date: 2025-02-03T08:52:50Z Rating: moderate References: * bsc#1218722 * bsc#1223980 Cross-References: * CVE-2024-22195 * CVE-2024-34064 CVSS scores: * CVE-2024-22195 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2024-34064 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-34064 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2024-34064 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N Affected Products: * SUSE Linux Micro 6.0 An update that solves two vulnerabilities can now be installed. ## Description: This update for python-Jinja2 fixes the following issues: * CVE-2024-34064, CVE-2024-22195: HTML attribute injection when passing user input as keys to xmlattr filter (bsc#1223980, bsc#1218722) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-37=1 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * python311-Jinja2-3.1.2-6.1 ## References: * https://www.suse.com/security/cve/CVE-2024-22195.html * https://www.suse.com/security/cve/CVE-2024-34064.html * https://bugzilla.suse.com/show_bug.cgi?id=1218722 * https://bugzilla.suse.com/show_bug.cgi?id=1223980 . Critical notice regarding HTML attr injection vulnerability within python-Jinja2 for SUSE Linux Micro. Immediate application of the patch is advised.. python Jinja2 update, SUSE security patch, HTML injection fix, Linux security advisory. . LinuxSecurity.com Team
Jun 04, 2025
SuSE
100
security advisorymoderate severityupdate instructionSUSE: 2025:20037-1 moderate: python-urllib3 Cross-Origin Issue
* bsc#1226469 Cross-References: * CVE-2024-37891 . # Security update for python-urllib3 Announcement ID: SUSE-SU-2025:20037-1 Release Date: 2025-02-03T08:53:14Z Rating: moderate References: * bsc#1226469 Cross-References: * CVE-2024-37891 CVSS scores: * CVE-2024-37891 ( SUSE ): 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N Affected Products: * SUSE Linux Micro 6.0 An update that solves one vulnerability can now be installed. ## Description: This update for python-urllib3 fixes the following issues: * CVE-2024-37891: Fixed issue where proxy-authorization request header was not stripped during cross-origin redirects (bsc#1226469) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-36=1 ## Package List: * SUSE Linux Micro 6.0 (noarch) * python311-urllib3-2.1.0-2.1 ## References: * https://www.suse.com/security/cve/CVE-2024-37891.html * https://bugzilla.suse.com/show_bug.cgi?id=1226469 . A medium-impact security flaw in python-urllib3 has been resolved. Please ensure you update your SUSE Linux Micro to enhance protection.. SUSE Linux Micro, python-urllib3 security, security update SUSE, cross-origin vulnerability. . LinuxSecurity.com Team
Jun 04, 2025
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Can sandbox isolation stop malware?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!