Explore top 10 tips to secure your open-source projects now. Read More
×* bsc#1240688 Cross-References: * CVE-2025-3155 . # Security update for yelp Announcement ID: SUSE-SU-2025:01904-1 Release Date: 2025-06-11T19:43:53Z Rating: moderate References: * bsc#1240688 Cross-References: * CVE-2025-3155 CVSS scores: * CVE-2025-3155 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2025-3155 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2025-3155 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N Affected Products: * openSUSE Leap 15.4 An update that solves one vulnerability can now be installed. ## Description: This update for yelp fixes the following issues: * CVE-2025-3155: JavaScript code execution and arbitrary file read through specially crafted help files and ghelp scheme URLs (bsc#1240688). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-1904=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * yelp-devel-41.2-150400.3.3.1 * yelp-41.2-150400.3.3.1 * libyelp0-debuginfo-41.2-150400.3.3.1 * libyelp0-41.2-150400.3.3.1 * yelp-debugsource-41.2-150400.3.3.1 * yelp-debuginfo-41.2-150400.3.3.1 * openSUSE Leap 15.4 (noarch) * yelp-lang-41.2-150400.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2025-3155.html * https://bugzilla.suse.com/show_bug.cgi?id=1240688 . SUSE has released an update for the yelp application to address a moderate security vulnerability involving JavaScript execution, enhancing security measures.. openSUSE, yelp update, security patch, moderate risk, JavaScript vulnerability. . LinuxSecurity.com Team
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-8655 http://linux.oracle.com/errata/ELSA-2025-8655.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable LinuxNetwork: x86_64: glibc-2.34-168.0.1.el9_6.19.i686.rpm glibc-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-all-langpacks-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-common-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-devel-2.34-168.0.1.el9_6.19.i686.rpm glibc-devel-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-doc-2.34-168.0.1.el9_6.19.noarch.rpm glibc-gconv-extra-2.34-168.0.1.el9_6.19.i686.rpm glibc-gconv-extra-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-headers-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-aa-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-af-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-agr-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-ak-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-am-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-an-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-anp-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-ar-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-as-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-ast-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-ayc-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-az-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-be-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-bem-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-ber-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-bg-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-bhb-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-bho-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-bi-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-bn-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-bo-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-br-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-brx-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-bs-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-byn-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-ca-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-ce-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-chr-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-ckb-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-cmn-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-crh-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-cs-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-csb-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-cv-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-cy-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-da-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-de-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-doi-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-dsb-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-dv-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-dz-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-el-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-en-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-eo-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-es-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-et-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-eu-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-fa-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-ff-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-fi-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-fil-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-fo-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-fr-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-fur-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-fy-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-ga-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-gd-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-gez-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-gl-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-gu-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-gv-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-ha-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-hak-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-he-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-hi-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-hif-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-hne-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-hr-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-hsb-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-ht-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-hu-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-hy-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-ia-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-id-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-ig-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-ik-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-is-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-it-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-iu-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-ja-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-ka-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-kab-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-kk-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-kl-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-km-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-kn-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-ko-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-kok-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-ks-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-ku-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-kw-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-ky-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-lb-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-lg-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-li-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-lij-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-ln-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-lo-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-lt-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-lv-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-lzh-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-mag-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-mai-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-mfe-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-mg-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-mhr-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-mi-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-miq-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-mjw-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-mk-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-ml-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-mn-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-mni-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-mnw-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-mr-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-ms-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-mt-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-my-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-nan-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-nb-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-nds-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-ne-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-nhn-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-niu-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-nl-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-nn-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-nr-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-nso-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-oc-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-om-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-or-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-os-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-pa-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-pap-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-pl-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-ps-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-pt-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-quz-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-raj-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-ro-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-ru-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-rw-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-sa-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-sah-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-sat-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-sc-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-sd-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-se-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-sgs-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-shn-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-shs-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-si-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-sid-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-sk-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-sl-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-sm-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-so-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-sq-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-sr-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-ss-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-st-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-sv-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-sw-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-szl-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-ta-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-tcy-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-te-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-tg-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-th-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-the-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-ti-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-tig-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-tk-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-tl-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-tn-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-to-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-tpi-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-tr-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-ts-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-tt-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-ug-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-uk-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-unm-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-ur-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-uz-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-ve-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-vi-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-wa-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-wae-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-wal-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-wo-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-xh-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-yi-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-yo-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-yue-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-yuw-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-zh-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-langpack-zu-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-locale-source-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-minimal-langpack-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-utils-2.34-168.0.1.el9_6.19.x86_64.rpm libnsl-2.34-168.0.1.el9_6.19.i686.rpm libnsl-2.34-168.0.1.el9_6.19.x86_64.rpm nscd-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-benchtests-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-nss-devel-2.34-168.0.1.el9_6.19.i686.rpm glibc-nss-devel-2.34-168.0.1.el9_6.19.x86_64.rpm glibc-static-2.34-168.0.1.el9_6.19.i686.rpm glibc-static-2.34-168.0.1.el9_6.19.x86_64.rpm nss_db-2.34-168.0.1.el9_6.19.i686.rpm nss_db-2.34-168.0.1.el9_6.19.x86_64.rpm nss_hesiod-2.34-168.0.1.el9_6.19.i686.rpm nss_hesiod-2.34-168.0.1.el9_6.19.x86_64.rpm aarch64: glibc-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-all-langpacks-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-common-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-devel-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-doc-2.34-168.0.1.el9_6.19.noarch.rpm glibc-gconv-extra-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-aa-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-af-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-agr-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-ak-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-am-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-an-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-anp-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-ar-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-as-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-ast-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-ayc-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-az-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-be-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-bem-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-ber-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-bg-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-bhb-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-bho-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-bi-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-bn-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-bo-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-br-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-brx-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-bs-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-byn-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-ca-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-ce-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-chr-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-ckb-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-cmn-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-crh-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-cs-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-csb-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-cv-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-cy-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-da-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-de-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-doi-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-dsb-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-dv-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-dz-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-el-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-en-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-eo-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-es-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-et-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-eu-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-fa-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-ff-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-fi-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-fil-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-fo-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-fr-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-fur-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-fy-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-ga-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-gd-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-gez-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-gl-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-gu-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-gv-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-ha-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-hak-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-he-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-hi-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-hif-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-hne-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-hr-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-hsb-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-ht-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-hu-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-hy-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-ia-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-id-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-ig-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-ik-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-is-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-it-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-iu-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-ja-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-ka-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-kab-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-kk-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-kl-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-km-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-kn-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-ko-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-kok-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-ks-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-ku-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-kw-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-ky-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-lb-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-lg-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-li-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-lij-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-ln-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-lo-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-lt-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-lv-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-lzh-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-mag-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-mai-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-mfe-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-mg-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-mhr-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-mi-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-miq-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-mjw-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-mk-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-ml-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-mn-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-mni-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-mnw-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-mr-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-ms-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-mt-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-my-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-nan-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-nb-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-nds-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-ne-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-nhn-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-niu-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-nl-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-nn-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-nr-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-nso-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-oc-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-om-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-or-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-os-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-pa-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-pap-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-pl-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-ps-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-pt-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-quz-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-raj-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-ro-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-ru-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-rw-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-sa-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-sah-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-sat-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-sc-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-sd-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-se-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-sgs-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-shn-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-shs-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-si-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-sid-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-sk-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-sl-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-sm-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-so-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-sq-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-sr-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-ss-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-st-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-sv-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-sw-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-szl-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-ta-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-tcy-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-te-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-tg-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-th-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-the-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-ti-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-tig-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-tk-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-tl-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-tn-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-to-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-tpi-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-tr-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-ts-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-tt-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-ug-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-uk-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-unm-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-ur-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-uz-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-ve-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-vi-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-wa-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-wae-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-wal-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-wo-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-xh-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-yi-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-yo-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-yue-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-yuw-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-zh-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-langpack-zu-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-locale-source-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-minimal-langpack-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-utils-2.34-168.0.1.el9_6.19.aarch64.rpm libnsl-2.34-168.0.1.el9_6.19.aarch64.rpm nscd-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-benchtests-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-nss-devel-2.34-168.0.1.el9_6.19.aarch64.rpm glibc-static-2.34-168.0.1.el9_6.19.aarch64.rpm nss_db-2.34-168.0.1.el9_6.19.aarch64.rpm nss_hesiod-2.34-168.0.1.el9_6.19.aarch64.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates//glibc-2.34-168.0.1.el9_6.19.src.rpm RelatedCVEs: CVE-2025-4802 Description of changes: [2.34-168.0.1.19] - Forward-port Oracle patches for ol9-u6 Reviewed-by: David Faust Oracle history: _______________________________________________ El-errata mailing list
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-8478 http://linux.oracle.com/errata/ELSA-2025-8478.html The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: x86_64: delve-1.24.1-1.0.1.module+el8.10.0+90602+3daf471e.x86_64.rpm golang-1.23.9-1.module+el8.10.0+90602+3daf471e.x86_64.rpm golang-bin-1.23.9-1.module+el8.10.0+90602+3daf471e.x86_64.rpm golang-docs-1.23.9-1.module+el8.10.0+90602+3daf471e.noarch.rpm golang-misc-1.23.9-1.module+el8.10.0+90602+3daf471e.noarch.rpm golang-src-1.23.9-1.module+el8.10.0+90602+3daf471e.noarch.rpm golang-tests-1.23.9-1.module+el8.10.0+90602+3daf471e.noarch.rpm go-toolset-1.23.9-1.module+el8.10.0+90602+3daf471e.x86_64.rpm aarch64: delve-1.24.1-1.0.1.module+el8.10.0+90602+3daf471e.aarch64.rpm golang-1.23.9-1.module+el8.10.0+90602+3daf471e.aarch64.rpm golang-bin-1.23.9-1.module+el8.10.0+90602+3daf471e.aarch64.rpm golang-docs-1.23.9-1.module+el8.10.0+90602+3daf471e.noarch.rpm golang-misc-1.23.9-1.module+el8.10.0+90602+3daf471e.noarch.rpm golang-src-1.23.9-1.module+el8.10.0+90602+3daf471e.noarch.rpm golang-tests-1.23.9-1.module+el8.10.0+90602+3daf471e.noarch.rpm go-toolset-1.23.9-1.module+el8.10.0+90602+3daf471e.aarch64.rpm SRPMS: http://oss.oracle.com/ol8/SRPMS-updates//delve-1.24.1-1.0.1.module+el8.10.0+90602+3daf471e.src.rpm http://oss.oracle.com/ol8/SRPMS-updates//golang-1.23.9-1.module+el8.10.0+90602+3daf471e.src.rpm http://oss.oracle.com/ol8/SRPMS-updates//go-toolset-1.23.9-1.module+el8.10.0+90602+3daf471e.src.rpm Related CVEs: CVE-2025-22871 Description of changes: delve [1.24.1-1.0.1] - Disable DWARF compression which has issues (Alex Burmashev) golang [1.23.9-1] - Update to Go 1.23.9 - Resolves: RHEL-94636 go-toolset [1.23.9-1] - Update to Go 1.23.9 - Resolves: RHEL-94636 _______________________________________________ El-errata mailing list
An update that solves 2 vulnerabilities can now be installed.. # apache2-mod_security2-2.9.10-1.1 on GA media Announcement ID: openSUSE-SU-2025:15197-1 Rating: moderate Cross-References: * CVE-2025-47947 * CVE-2025-48866 CVSS scores: * CVE-2025-47947 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-47947 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-48866 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-48866 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Affected Products: * openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. ## Description: These are all security issues fixed in the apache2-mod_security2-2.9.10-1.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * apache2-mod_security2 2.9.10-1.1 ## References: * https://www.suse.com/security/cve/CVE-2025-47947.html * https://www.suse.com/security/cve/CVE-2025-48866.html . Announcement regarding openSUSE Tumbleweed fixes for apache2-mod_security2 version 2.9.10-1.1, classified as having moderate risk.. openSUSE apache2 mod_security security advisory. . LinuxSecurity.com Team
* bsc#1233668 Cross-References: * CVE-2024-52804 . # Security update for python-tornado6 Announcement ID: SUSE-SU-2025:20096-1 Release Date: 2025-02-03T09:13:20Z Rating: moderate References: * bsc#1233668 Cross-References: * CVE-2024-52804 CVSS scores: * CVE-2024-52804 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2024-52804 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2024-52804 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves one vulnerability can now be installed. ## Description: This update for python-tornado6 fixes the following issues: * CVE-2024-52804: Avoid quadratic performance of cookie parsing (bsc#1233668). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-141=1 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * python311-tornado6-debuginfo-6.4-2.1 * python-tornado6-debugsource-6.4-2.1 * python311-tornado6-6.4-2.1 ## References: * https://www.suse.com/security/cve/CVE-2024-52804.html * https://bugzilla.suse.com/show_bug.cgi?id=1233668 . SUSE Linux Micro has launched an update to rectify a cookie parsing vulnerability related to python-tornado6, categorized with a moderate severity level.. SUSE Linux Micro, python-tornado6, security advisory, cookie parsing, update. . LinuxSecurity.com Team
* bsc#1212476 * bsc#1226586 * bsc#1233420 Cross-References: . # Security update for avahi Announcement ID: SUSE-SU-2025:20103-1 Release Date: 2025-02-03T09:17:39Z Rating: moderate References: * bsc#1212476 * bsc#1226586 * bsc#1233420 Cross-References: * CVE-2024-52616 CVSS scores: * CVE-2024-52616 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-52616 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2024-52616 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected Products: * SUSE Linux Micro 6.0 An update that solves one vulnerability and has two fixes can now be installed. ## Description: This update for avahi fixes the following issues: * CVE-2024-52616: Properly randomize query id of DNS packets (bsc#1233420). Bug fixes: * No longer supply bogus services to callbacks (bsc#1226586). * Tag hardening patches as PATCH-FEATURE-OPENSUSE * Remove dependency on /usr/bin/python3 using %python3_fix_shebang macro (bsc#1212476). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-155=1 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * avahi-debugsource-0.8-6.1 * libavahi-common3-debuginfo-0.8-6.1 * libavahi-common3-0.8-6.1 * avahi-0.8-6.1 * libavahi-core7-0.8-6.1 * libavahi-client3-debuginfo-0.8-6.1 * libavahi-core7-debuginfo-0.8-6.1 * libavahi-client3-0.8-6.1 * avahi-debuginfo-0.8-6.1 ## References: * https://www.suse.com/security/cve/CVE-2024-52616.html * https://bugzilla.suse.com/show_bug.cgi?id=1212476 * https://bugzilla.suse.com/show_bug.cgi?id=1226586 * https://bugzilla.suse.com/show_bug.cgi?id=1233420 . SUSE has released an update to fix a moderate-severity DNS issue in the Avahi servicethat could affect local network service discovery and security. SUSE Linux, avahi, security update, DNS issues, software patches. . LinuxSecurity.com Team
* bsc#1233677 * bsc#1235008 * bsc#1235431 * bsc#1240840 . # Security update for kernel-livepatch-MICRO-6-0_Update_3 Announcement ID: SUSE-SU-2025:20214-1 Release Date: 2025-04-29T11:24:25Z Rating: moderate References: * bsc#1233677 * bsc#1235008 * bsc#1235431 * bsc#1240840 Cross-References: * CVE-2024-53082 * CVE-2024-53237 * CVE-2024-56650 * CVE-2024-8805 CVSS scores: * CVE-2024-53082 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2024-53082 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2024-53237 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-53237 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-53237 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-53237 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-56650 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-56650 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-56650 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2024-8805 ( SUSE ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-8805 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-8805 ( NVD ): 8.8 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves four vulnerabilities can now be installed. ## Description: This update for kernel-livepatch-MICRO-6-0_Update_3 fixes the following issues: * CVE-2024-53237: Fixed bluetooth: fix use-after-free in device_for_each_child() (bsc#1235008) * CVE-2024-53082: Fixed virtio_net: Add hash_key_length check (bsc#1233677) * CVE-2024-8805: Fixed BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability (bsc#1240840) * CVE-2024-56650: Fixed netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235431) ## PatchInstructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-19=1 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-20-default-4-1.2 * kernel-livepatch-MICRO-6-0_Update_3-debugsource-4-1.2 * kernel-livepatch-6_4_0-20-default-debuginfo-4-1.2 ## References: * https://www.suse.com/security/cve/CVE-2024-53082.html * https://www.suse.com/security/cve/CVE-2024-53237.html * https://www.suse.com/security/cve/CVE-2024-56650.html * https://www.suse.com/security/cve/CVE-2024-8805.html * https://bugzilla.suse.com/show_bug.cgi?id=1233677 * https://bugzilla.suse.com/show_bug.cgi?id=1235008 * https://bugzilla.suse.com/show_bug.cgi?id=1235431 * https://bugzilla.suse.com/show_bug.cgi?id=1240840 . Address various concerns in SUSE Linux Micro 6.0 by implementing numerous enhancements for the kernel and Bluetooth features.. Linux Security Patch, SUSE Update, Kernel Livepatch, Remote Code Execution, Security Issue Fix. . LinuxSecurity.com Team
* bsc#1217783 * bsc#1217826 * bsc#1222121 * bsc#1230551 * bsc#1230552 . # Security update for pcp Announcement ID: SUSE-SU-2025:20235-1 Release Date: 2025-03-07T16:42:41Z Rating: moderate References: * bsc#1217783 * bsc#1217826 * bsc#1222121 * bsc#1230551 * bsc#1230552 Cross-References: * CVE-2023-6917 * CVE-2024-3019 * CVE-2024-45769 * CVE-2024-45770 CVSS scores: * CVE-2023-6917 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2023-6917 ( NVD ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N * CVE-2023-6917 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-3019 ( SUSE ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-45769 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-45769 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-45769 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-45770 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2024-45770 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N * CVE-2024-45770 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N Affected Products: * SUSE Linux Micro 6.1 An update that solves four vulnerabilities and has one fix can now be installed. ## Description: This update for pcp fixes the following issues: * CVE-2024-45769: Fixed `pmcd` heap corruption through metric pmstore operations (bsc#1230551). * CVE-2024-45770: Fixed `pmpost` symlink attack allowing escalating `pcp` to `root` user (bsc#1230552). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-33=1 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) *libpcp_import1-6.2.0-slfo.1.1_3.1 * libpcp3-debuginfo-6.2.0-slfo.1.1_3.1 * pcp-debugsource-6.2.0-slfo.1.1_3.1 * libpcp_import1-debuginfo-6.2.0-slfo.1.1_3.1 * libpcp3-6.2.0-slfo.1.1_3.1 * SUSE Linux Micro 6.1 (noarch) * pcp-conf-6.2.0-slfo.1.1_3.1 ## References: * https://www.suse.com/security/cve/CVE-2023-6917.html * https://www.suse.com/security/cve/CVE-2024-3019.html * https://www.suse.com/security/cve/CVE-2024-45769.html * https://www.suse.com/security/cve/CVE-2024-45770.html * https://bugzilla.suse.com/show_bug.cgi?id=1217783 * https://bugzilla.suse.com/show_bug.cgi?id=1217826 * https://bugzilla.suse.com/show_bug.cgi?id=1222121 * https://bugzilla.suse.com/show_bug.cgi?id=1230551 * https://bugzilla.suse.com/show_bug.cgi?id=1230552 . The new patch for SUSE Linux Micro 6.1 mitigates moderate security vulnerabilities in pcp, correcting heap corruption and symbolic link problems.. SUSE Linux, pcp update, moderate threats, heap corruption, Linux Micro. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.