Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE go1.25-openssl Important Security Issues 2026-3151-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE aws-nitro-enclaves-cli Important Issues Advisory 2026-3152-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE nghttp2 Moderate HTTP Request Smuggling Issue 2026-3153-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE python-tornado6 Moderate Credential Leak Vulnerability 2026-3155-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Kernel Important Security Update Vulnerability Fix 2026-3156-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE php7 Moderate Buffer Vulnerability Resolution SUSE-SU-2026-3165-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE libkrun Important Patch 2026-0255-1 for 8 Issues

Calendar White Jul 21, 2026
Important
Rockylinux Esm H900
Rocky

Rocky Linux httpd Important Denial of Service Fix RLSA-2026-42828

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 20.04 AccountsService Critical Exec Command Threat USN-8580-2

Calendar White Jul 21, 2026
Critical
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 18 articles for you...
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorypatchimportant

SUSE: 2025:0284-1 important: nodejs22 memory leak and permission bypass

* bsc#1236250 * bsc#1236251 * bsc#1236258 Cross-References: . # Security update for nodejs22 Announcement ID: SUSE-SU-2025:0284-1 Release Date: 2025-01-29T13:47:59Z Rating: important References: * bsc#1236250 * bsc#1236251 * bsc#1236258 Cross-References: * CVE-2025-22150 * CVE-2025-23083 * CVE-2025-23085 CVSS scores: * CVE-2025-22150 ( SUSE ): 7.4 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2025-22150 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2025-22150 ( NVD ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2025-23083 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-23083 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-23083 ( NVD ): 7.7 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2025-23085 ( SUSE ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2025-23085 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * Web and Scripting Module 15-SP6 An update that solves three vulnerabilities can now be installed. ## Description: This update for nodejs22 fixes the following issues: Update to 22.13.1: * CVE-2025-23083: Fixed worker permission bypass via InternalWorker leak in diagnostics (bsc#1236251) * CVE-2025-23085: Fixed HTTP2 memory leak on premature close and ERR_PROTO (bsc#1236250) * CVE-2025-22150: Fixed insufficiently random values used when defining the boundary for a multipart/form-data request in undici (bsc#1236258) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Web and Scripting Module 15-SP6 zypper in -t patchSUSE-SLE-Module-Web-Scripting-15-SP6-2025-284=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-284=1 openSUSE-SLE-15.6-2025-284=1 ## Package List: * Web and Scripting Module 15-SP6 (aarch64 ppc64le s390x x86_64) * nodejs22-debugsource-22.13.1-150600.13.6.1 * nodejs22-22.13.1-150600.13.6.1 * nodejs22-devel-22.13.1-150600.13.6.1 * npm22-22.13.1-150600.13.6.1 * nodejs22-debuginfo-22.13.1-150600.13.6.1 * Web and Scripting Module 15-SP6 (noarch) * nodejs22-docs-22.13.1-150600.13.6.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * nodejs22-debugsource-22.13.1-150600.13.6.1 * corepack22-22.13.1-150600.13.6.1 * nodejs22-22.13.1-150600.13.6.1 * nodejs22-devel-22.13.1-150600.13.6.1 * npm22-22.13.1-150600.13.6.1 * nodejs22-debuginfo-22.13.1-150600.13.6.1 * openSUSE Leap 15.6 (noarch) * nodejs22-docs-22.13.1-150600.13.6.1 ## References: * https://www.suse.com/security/cve/CVE-2025-22150.html * https://www.suse.com/security/cve/CVE-2025-23083.html * https://www.suse.com/security/cve/CVE-2025-23085.html * https://bugzilla.suse.com/show_bug.cgi?id=1236250 * https://bugzilla.suse.com/show_bug.cgi?id=1236251 * https://bugzilla.suse.com/show_bug.cgi?id=1236258 . Uncover essential safety enhancements for Node.js 22 that address critical vulnerabilities such as resource exhaustion and access control flaws.. nodejs22 update, SUSE security advisory, patch instructions, nodejs22 vulnerabilities. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jan 29, 2025 •Important SuSE
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisorysecurity updateimportant

openSUSE: 2025:0284-1 important: nodejs22 memory leak and permission bypass

An update that solves three vulnerabilities can now be installed.. # Security update for nodejs22 Announcement ID: SUSE-SU-2025:0284-1 Release Date: 2025-01-29T13:47:59Z Rating: important References: * bsc#1236250 * bsc#1236251 * bsc#1236258 Cross-References: * CVE-2025-22150 * CVE-2025-23083 * CVE-2025-23085 CVSS scores: * CVE-2025-22150 ( SUSE ): 7.4 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2025-22150 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2025-22150 ( NVD ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2025-23083 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-23083 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-23083 ( NVD ): 7.7 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2025-23085 ( SUSE ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2025-23085 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * Web and Scripting Module 15-SP6 An update that solves three vulnerabilities can now be installed. ## Description: This update for nodejs22 fixes the following issues: Update to 22.13.1: * CVE-2025-23083: Fixed worker permission bypass via InternalWorker leak in diagnostics (bsc#1236251) * CVE-2025-23085: Fixed HTTP2 memory leak on premature close and ERR_PROTO (bsc#1236250) * CVE-2025-22150: Fixed insufficiently random values used when defining the boundary for a multipart/form-data request in undici (bsc#1236258) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Web and Scripting Module 15-SP6 zypper in -t patchSUSE-SLE-Module-Web-Scripting-15-SP6-2025-284=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-284=1 openSUSE-SLE-15.6-2025-284=1 ## Package List: * Web and Scripting Module 15-SP6 (aarch64 ppc64le s390x x86_64) * nodejs22-debugsource-22.13.1-150600.13.6.1 * nodejs22-22.13.1-150600.13.6.1 * nodejs22-devel-22.13.1-150600.13.6.1 * npm22-22.13.1-150600.13.6.1 * nodejs22-debuginfo-22.13.1-150600.13.6.1 * Web and Scripting Module 15-SP6 (noarch) * nodejs22-docs-22.13.1-150600.13.6.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * nodejs22-debugsource-22.13.1-150600.13.6.1 * corepack22-22.13.1-150600.13.6.1 * nodejs22-22.13.1-150600.13.6.1 * nodejs22-devel-22.13.1-150600.13.6.1 * npm22-22.13.1-150600.13.6.1 * nodejs22-debuginfo-22.13.1-150600.13.6.1 * openSUSE Leap 15.6 (noarch) * nodejs22-docs-22.13.1-150600.13.6.1 ## References: * https://www.suse.com/security/cve/CVE-2025-22150.html * https://www.suse.com/security/cve/CVE-2025-23083.html * https://www.suse.com/security/cve/CVE-2025-23085.html * https://bugzilla.suse.com/show_bug.cgi?id=1236250 * https://bugzilla.suse.com/show_bug.cgi?id=1236251 * https://bugzilla.suse.com/show_bug.cgi?id=1236258 . Important security patch issued for nodejs22 on openSUSE tackling three significant vulnerabilities as of January 29, 2025.. nodejs22 security update, openSUSE patch, SUSE Linux security, memory leak fix, permission bypass remedy. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jan 29, 2025 •Important OpenSUSE
Banner 3 1028x280 1708121785 1771599793
100
Ls Advisories Suse Esm H240
Price Tag%201security advisoryimportantmemory leak

openSUSE: 2025:0237-1 critical: nodejs20 HTTP2 memory leak and perm fix

* bsc#1236250 * bsc#1236251 * bsc#1236258 Cross-References: . # Security update for nodejs20 Announcement ID: SUSE-SU-2025:0237-1 Release Date: 2025-01-24T19:33:47Z Rating: important References: * bsc#1236250 * bsc#1236251 * bsc#1236258 Cross-References: * CVE-2025-22150 * CVE-2025-23083 * CVE-2025-23085 CVSS scores: * CVE-2025-22150 ( SUSE ): 7.4 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2025-22150 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2025-22150 ( NVD ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2025-23083 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-23083 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-23083 ( NVD ): 7.7 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2025-23085 ( SUSE ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2025-23085 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * Web and Scripting Module 15-SP6 An update that solves three vulnerabilities can now be installed. ## Description: This update for nodejs20 fixes the following issues: Update to 20.18.2: * CVE-2025-23083: Fixed worker permission bypass via InternalWorker leak in diagnostics (bsc#1236251) * CVE-2025-23085: Fixed HTTP2 memory leak on premature close and ERR_PROTO (bsc#1236250) * CVE-2025-22150: Fixed insufficiently random values used when defining the boundary for a multipart/form-data request in undici (bsc#1236258) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-237=1SUSE-2025-237=1 * Web and Scripting Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP6-2025-237=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * npm20-20.18.2-150600.3.9.1 * nodejs20-debugsource-20.18.2-150600.3.9.1 * corepack20-20.18.2-150600.3.9.1 * nodejs20-devel-20.18.2-150600.3.9.1 * nodejs20-20.18.2-150600.3.9.1 * nodejs20-debuginfo-20.18.2-150600.3.9.1 * openSUSE Leap 15.6 (noarch) * nodejs20-docs-20.18.2-150600.3.9.1 * Web and Scripting Module 15-SP6 (aarch64 ppc64le s390x x86_64) * npm20-20.18.2-150600.3.9.1 * nodejs20-debugsource-20.18.2-150600.3.9.1 * nodejs20-devel-20.18.2-150600.3.9.1 * nodejs20-20.18.2-150600.3.9.1 * nodejs20-debuginfo-20.18.2-150600.3.9.1 * Web and Scripting Module 15-SP6 (noarch) * nodejs20-docs-20.18.2-150600.3.9.1 ## References: * https://www.suse.com/security/cve/CVE-2025-22150.html * https://www.suse.com/security/cve/CVE-2025-23083.html * https://www.suse.com/security/cve/CVE-2025-23085.html * https://bugzilla.suse.com/show_bug.cgi?id=1236250 * https://bugzilla.suse.com/show_bug.cgi?id=1236251 * https://bugzilla.suse.com/show_bug.cgi?id=1236258 . SUSE rolls out security enhancements for nodejs20 tackling essential vulnerabilities aimed at boosting system reliability and user protection.. nodejs20 security update, SUSE Linux advisory, memory leak fix, permission bypass, important security patch. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jan 24, 2025 •Critical SuSE
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisorypatchimportant

openSUSE 15.6: SUSE-SU-2025:0237-1 important: nodejs20 issues

An update that solves three vulnerabilities can now be installed.. # Security update for nodejs20 Announcement ID: SUSE-SU-2025:0237-1 Release Date: 2025-01-24T19:33:47Z Rating: important References: * bsc#1236250 * bsc#1236251 * bsc#1236258 Cross-References: * CVE-2025-22150 * CVE-2025-23083 * CVE-2025-23085 CVSS scores: * CVE-2025-22150 ( SUSE ): 7.4 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2025-22150 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2025-22150 ( NVD ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2025-23083 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-23083 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-23083 ( NVD ): 7.7 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2025-23085 ( SUSE ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2025-23085 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * Web and Scripting Module 15-SP6 An update that solves three vulnerabilities can now be installed. ## Description: This update for nodejs20 fixes the following issues: Update to 20.18.2: * CVE-2025-23083: Fixed worker permission bypass via InternalWorker leak in diagnostics (bsc#1236251) * CVE-2025-23085: Fixed HTTP2 memory leak on premature close and ERR_PROTO (bsc#1236250) * CVE-2025-22150: Fixed insufficiently random values used when defining the boundary for a multipart/form-data request in undici (bsc#1236258) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-237=1SUSE-2025-237=1 * Web and Scripting Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP6-2025-237=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * npm20-20.18.2-150600.3.9.1 * nodejs20-debugsource-20.18.2-150600.3.9.1 * corepack20-20.18.2-150600.3.9.1 * nodejs20-devel-20.18.2-150600.3.9.1 * nodejs20-20.18.2-150600.3.9.1 * nodejs20-debuginfo-20.18.2-150600.3.9.1 * openSUSE Leap 15.6 (noarch) * nodejs20-docs-20.18.2-150600.3.9.1 * Web and Scripting Module 15-SP6 (aarch64 ppc64le s390x x86_64) * npm20-20.18.2-150600.3.9.1 * nodejs20-debugsource-20.18.2-150600.3.9.1 * nodejs20-devel-20.18.2-150600.3.9.1 * nodejs20-20.18.2-150600.3.9.1 * nodejs20-debuginfo-20.18.2-150600.3.9.1 * Web and Scripting Module 15-SP6 (noarch) * nodejs20-docs-20.18.2-150600.3.9.1 ## References: * https://www.suse.com/security/cve/CVE-2025-22150.html * https://www.suse.com/security/cve/CVE-2025-23083.html * https://www.suse.com/security/cve/CVE-2025-23085.html * https://bugzilla.suse.com/show_bug.cgi?id=1236250 * https://bugzilla.suse.com/show_bug.cgi?id=1236251 * https://bugzilla.suse.com/show_bug.cgi?id=1236258 . This crucial release for nodejs20 tackles significant vulnerabilities such as memory leaks and unauthorized access in openSUSE.. nodejs20 security update, SUSE security advisory, openSUSE patch, important software update. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jan 24, 2025 •Important OpenSUSE
Banner 3 1028x280 1708121785 1771599793
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisorycriticalimportant

openSUSE 15.5: SUSE-SU-2025:0232-1 important: nodejs20 issues

An update that solves three vulnerabilities can now be installed.. # Security update for nodejs20 Announcement ID: SUSE-SU-2025:0232-1 Release Date: 2025-01-24T14:33:49Z Rating: important References: * bsc#1236250 * bsc#1236251 * bsc#1236258 Cross-References: * CVE-2025-22150 * CVE-2025-23083 * CVE-2025-23085 CVSS scores: * CVE-2025-22150 ( SUSE ): 7.4 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2025-22150 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2025-22150 ( NVD ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2025-23083 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-23083 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-23083 ( NVD ): 7.7 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2025-23085 ( SUSE ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2025-23085 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves three vulnerabilities can now be installed. ## Description: This update for nodejs20 fixes the following issues: Update to 20.18.2: * CVE-2025-23083: Fixed worker permission bypass via InternalWorker leak in diagnostics (bsc#1236251) * CVE-2025-23085: Fixed HTTP2 memory leak on premature close and ERR_PROTO (bsc#1236250) * CVE-2025-22150: Fixed insufficiently random values used when defining the boundary for a multipart/form-data request in undici (bsc#1236258) ## Patch Instructions: To install this SUSE update use the SUSE recommendedinstallation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2025-232=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-232=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-232=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-232=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-232=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * nodejs20-debugsource-20.18.2-150500.11.18.1 * npm20-20.18.2-150500.11.18.1 * nodejs20-devel-20.18.2-150500.11.18.1 * nodejs20-debuginfo-20.18.2-150500.11.18.1 * nodejs20-20.18.2-150500.11.18.1 * corepack20-20.18.2-150500.11.18.1 * openSUSE Leap 15.5 (noarch) * nodejs20-docs-20.18.2-150500.11.18.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * nodejs20-debugsource-20.18.2-150500.11.18.1 * npm20-20.18.2-150500.11.18.1 * nodejs20-devel-20.18.2-150500.11.18.1 * nodejs20-debuginfo-20.18.2-150500.11.18.1 * nodejs20-20.18.2-150500.11.18.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * nodejs20-docs-20.18.2-150500.11.18.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * nodejs20-debugsource-20.18.2-150500.11.18.1 * npm20-20.18.2-150500.11.18.1 * nodejs20-devel-20.18.2-150500.11.18.1 * nodejs20-debuginfo-20.18.2-150500.11.18.1 * nodejs20-20.18.2-150500.11.18.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * nodejs20-docs-20.18.2-150500.11.18.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) *nodejs20-debugsource-20.18.2-150500.11.18.1 * npm20-20.18.2-150500.11.18.1 * nodejs20-devel-20.18.2-150500.11.18.1 * nodejs20-debuginfo-20.18.2-150500.11.18.1 * nodejs20-20.18.2-150500.11.18.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * nodejs20-docs-20.18.2-150500.11.18.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * nodejs20-debugsource-20.18.2-150500.11.18.1 * npm20-20.18.2-150500.11.18.1 * nodejs20-devel-20.18.2-150500.11.18.1 * nodejs20-debuginfo-20.18.2-150500.11.18.1 * nodejs20-20.18.2-150500.11.18.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * nodejs20-docs-20.18.2-150500.11.18.1 ## References: * https://www.suse.com/security/cve/CVE-2025-22150.html * https://www.suse.com/security/cve/CVE-2025-23083.html * https://www.suse.com/security/cve/CVE-2025-23085.html * https://bugzilla.suse.com/show_bug.cgi?id=1236250 * https://bugzilla.suse.com/show_bug.cgi?id=1236251 * https://bugzilla.suse.com/show_bug.cgi?id=1236258 . Crucial security enhancement for nodejs20 tackling significant vulnerabilities in openSUSE. Key update details provided.. openSUSE Security Update,nodejs20 Advisory,important security fix,nodejs vulnerabilities. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jan 24, 2025 •Important OpenSUSE
100
Ls Advisories Suse Esm H240
Price Tag%201security advisoryimportant updateserver applications

openSUSE Leap 15.5 SUSE-SU-2024:0200-1 important: redis7 permission bypass

* bsc#1212119 * bsc#1216376 Cross-References: * CVE-2023-45145 . # Security update for redis7 Announcement ID: SUSE-SU-2024:0200-1 Rating: important References: * bsc#1212119 * bsc#1216376 Cross-References: * CVE-2023-45145 CVSS scores: * CVE-2023-45145 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-45145 ( NVD ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N Affected Products: * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for redis7 fixes the following issues: * CVE-2023-45145: Fixed a potential permission bypass due to a race condition during UNIX socket creation (bsc#1216376). The following non-security issues were fixed: * Redis services are no longer disabled after an upgrade (bsc#1212119). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-200=1 openSUSE-SLE-15.5-2024-200=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-200=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * redis7-debugsource-7.0.8-150500.3.9.1 * redis7-7.0.8-150500.3.9.1 * redis7-debuginfo-7.0.8-150500.3.9.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * redis7-debugsource-7.0.8-150500.3.9.1 * redis7-7.0.8-150500.3.9.1 * redis7-debuginfo-7.0.8-150500.3.9.1 ## References: * https://www.suse.com/security/cve/CVE-2023-45145.html *https://bugzilla.suse.com/show_bug.cgi?id=1212119 * https://bugzilla.suse.com/show_bug.cgi?id=1216376 . An essential security update for Redis 7 addresses a critical privilege escalation flaw. Follow the provided upgrade guidelines meticulously.. Permission Bypass, Redis7 Security Patch, openSUSE Redis Update. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jan 23, 2024 •Important SuSE
Banner 3 1028x280 1708121785 1771599793
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisorycritical threatimportant update

openSUSE Leap 15.5 SUSE-SU-2024:0200-1 Critical: Redis7 Permission Bypass

This update for redis7 fixes the following issues: CVE-2023-45145: Fixed a potential permission bypass due to a race condition during UNIX socket creation (bsc#1216376).. # Security update for redis7 Announcement ID: SUSE-SU-2024:0200-1 Rating: important References: * bsc#1212119 * bsc#1216376 Cross-References: * CVE-2023-45145 CVSS scores: * CVE-2023-45145 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-45145 ( NVD ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N Affected Products: * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for redis7 fixes the following issues: * CVE-2023-45145: Fixed a potential permission bypass due to a race condition during UNIX socket creation (bsc#1216376). The following non-security issues were fixed: * Redis services are no longer disabled after an upgrade (bsc#1212119). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-200=1 openSUSE-SLE-15.5-2024-200=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-200=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * redis7-debugsource-7.0.8-150500.3.9.1 * redis7-7.0.8-150500.3.9.1 * redis7-debuginfo-7.0.8-150500.3.9.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * redis7-debugsource-7.0.8-150500.3.9.1 * redis7-7.0.8-150500.3.9.1 * redis7-debuginfo-7.0.8-150500.3.9.1 ## References: * https://www.suse.com/security/cve/CVE-2023-45145.html * https://bugzilla.suse.com/show_bug.cgi?id=1212119 * https://bugzilla.suse.com/show_bug.cgi?id=1216376 . An important patch for redis7 has been released, tackling CVE-2023-45145, which resolves a possible vulnerability that could lead to unauthorized access.. Redis7 Security Update, openSUSE Permissions, Important Patch. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jan 23, 2024 •Critical OpenSUSE
100
Ls Advisories Suse Esm H240
Price Tag%201security advisoryupdatecritical

SUSE: 2023:4376-1 Critical: Redis Permission Bypass Issue

* bsc#1216376 Cross-References: * CVE-2023-45145 . # Security update for redis Announcement ID: SUSE-SU-2023:4376-1 Rating: important References: * bsc#1216376 Cross-References: * CVE-2023-45145 CVSS scores: * CVE-2023-45145 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-45145 ( NVD ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N Affected Products: * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Manager Proxy 4.2 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Server 4.2 An update that solves one vulnerability can now be installed. ## Description: This update for redis fixes the following issues: * CVE-2023-45145: Fixed a potential permission bypass due to a race condition during UNIX socket creation (bsc#1216376). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4376=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4376=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patchSUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4376=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4376=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4376=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4376=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4376=1 * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-4376=1 * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-4376=1 * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-4376=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-4376=1 ## Package List: * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * redis-debuginfo-6.0.14-150200.6.29.1 * redis-6.0.14-150200.6.29.1 * redis-debugsource-6.0.14-150200.6.29.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * redis-debuginfo-6.0.14-150200.6.29.1 * redis-6.0.14-150200.6.29.1 * redis-debugsource-6.0.14-150200.6.29.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * redis-debuginfo-6.0.14-150200.6.29.1 * redis-6.0.14-150200.6.29.1 * redis-debugsource-6.0.14-150200.6.29.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * redis-debuginfo-6.0.14-150200.6.29.1 * redis-6.0.14-150200.6.29.1 * redis-debugsource-6.0.14-150200.6.29.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * redis-debuginfo-6.0.14-150200.6.29.1 * redis-6.0.14-150200.6.29.1 *redis-debugsource-6.0.14-150200.6.29.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * redis-debuginfo-6.0.14-150200.6.29.1 * redis-6.0.14-150200.6.29.1 * redis-debugsource-6.0.14-150200.6.29.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * redis-debuginfo-6.0.14-150200.6.29.1 * redis-6.0.14-150200.6.29.1 * redis-debugsource-6.0.14-150200.6.29.1 * SUSE Manager Proxy 4.2 (x86_64) * redis-debuginfo-6.0.14-150200.6.29.1 * redis-6.0.14-150200.6.29.1 * redis-debugsource-6.0.14-150200.6.29.1 * SUSE Manager Retail Branch Server 4.2 (x86_64) * redis-debuginfo-6.0.14-150200.6.29.1 * redis-6.0.14-150200.6.29.1 * redis-debugsource-6.0.14-150200.6.29.1 * SUSE Manager Server 4.2 (ppc64le s390x x86_64) * redis-debuginfo-6.0.14-150200.6.29.1 * redis-6.0.14-150200.6.29.1 * redis-debugsource-6.0.14-150200.6.29.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * redis-debuginfo-6.0.14-150200.6.29.1 * redis-6.0.14-150200.6.29.1 * redis-debugsource-6.0.14-150200.6.29.1 ## References: * https://www.suse.com/security/cve/CVE-2023-45145.html * https://bugzilla.suse.com/show_bug.cgi?id=1216376 . SUSE enhances postgresql to address a severe vulnerability in access controls; safeguarding your environments is essential to thwart potential threats.. Redis Security Patch, Permission Bypass Fix, SUSE Linux Update. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Nov 06, 2023 •Important SuSE
Banner 3 1028x280 1708121785 1771599793
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics