Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 5 articles for you...
100
security advisorymoderateSuSESUSE: Protobuf Moderate Crash Issue Update CVE-2025-4565 2025:3722-1
* bsc#1244663 Cross-References: * CVE-2025-4565 . # Security update for protobuf Announcement ID: SUSE-SU-2025:3722-1 Release Date: 2025-10-22T11:21:36Z Rating: moderate References: * bsc#1244663 Cross-References: * CVE-2025-4565 CVSS scores: * CVE-2025-4565 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-4565 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-4565 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-4565 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP6 * Basesystem Module 15-SP7 * Public Cloud Module 15-SP3 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * Public Cloud Module 15-SP6 * Public Cloud Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE LinuxEnterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP6 * SUSE Package Hub 15 15-SP7 An update that solves one vulnerability can now be installed. ## Description: This update for protobuf fixes the following issues: * CVE-2025-4565: parsing of untrusted Protocol Buffers data containing an arbitrary number of recursive groups or messages can lead to crash due to a `RecursionError` (bsc#1244663). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-3722=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-3722=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-3722=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-3722=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-3722=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-3722=1 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2025-3722=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-3722=1 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2025-3722=1 * Public Cloud Module 15-SP3 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP3-2025-3722=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2025-3722=1 * PublicCloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2025-3722=1 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2025-3722=1 * Public Cloud Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP7-2025-3722=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2025-3722=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-3722=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-3722=1 ## Package List: * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * protobuf-debugsource-3.9.2-150200.4.27.1 * libprotobuf-lite20-debuginfo-3.9.2-150200.4.27.1 * libprotobuf-lite20-3.9.2-150200.4.27.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * protobuf-debugsource-3.9.2-150200.4.27.1 * libprotobuf-lite20-debuginfo-3.9.2-150200.4.27.1 * libprotobuf-lite20-3.9.2-150200.4.27.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * protobuf-debugsource-3.9.2-150200.4.27.1 * libprotobuf-lite20-debuginfo-3.9.2-150200.4.27.1 * libprotobuf-lite20-3.9.2-150200.4.27.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * protobuf-debugsource-3.9.2-150200.4.27.1 * libprotobuf-lite20-debuginfo-3.9.2-150200.4.27.1 * libprotobuf-lite20-3.9.2-150200.4.27.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libprotobuf-lite20-debuginfo-3.9.2-150200.4.27.1 * libprotobuf-lite20-3.9.2-150200.4.27.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * protobuf-debugsource-3.9.2-150200.4.27.1 * libprotobuf20-debuginfo-3.9.2-150200.4.27.1 * libprotobuf20-3.9.2-150200.4.27.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * protobuf-debugsource-3.9.2-150200.4.27.1 * libprotobuf20-debuginfo-3.9.2-150200.4.27.1 * libprotobuf20-3.9.2-150200.4.27.1 * SUSE PackageHub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * python3-protobuf-3.9.2-150200.4.27.1 * protobuf-debugsource-3.9.2-150200.4.27.1 * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x x86_64) * python3-protobuf-3.9.2-150200.4.27.1 * protobuf-debugsource-3.9.2-150200.4.27.1 * Public Cloud Module 15-SP3 (aarch64 ppc64le s390x x86_64) * python3-protobuf-3.9.2-150200.4.27.1 * protobuf-debugsource-3.9.2-150200.4.27.1 * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * python3-protobuf-3.9.2-150200.4.27.1 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python3-protobuf-3.9.2-150200.4.27.1 * Public Cloud Module 15-SP6 (aarch64 ppc64le s390x x86_64) * python3-protobuf-3.9.2-150200.4.27.1 * protobuf-debugsource-3.9.2-150200.4.27.1 * Public Cloud Module 15-SP7 (aarch64 ppc64le s390x x86_64) * python3-protobuf-3.9.2-150200.4.27.1 * protobuf-debugsource-3.9.2-150200.4.27.1 * SUSE Linux Enterprise Micro 5.1 (aarch64 s390x x86_64) * libprotobuf-lite20-3.9.2-150200.4.27.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * protobuf-debugsource-3.9.2-150200.4.27.1 * libprotobuf-lite20-debuginfo-3.9.2-150200.4.27.1 * libprotobuf-lite20-3.9.2-150200.4.27.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * protobuf-debugsource-3.9.2-150200.4.27.1 * libprotobuf-lite20-debuginfo-3.9.2-150200.4.27.1 * libprotobuf-lite20-3.9.2-150200.4.27.1 ## References: * https://www.suse.com/security/cve/CVE-2025-4565.html * https://bugzilla.suse.com/show_bug.cgi?id=1244663 . Update addresses CVE-2025-4565 in protobuf for SUSE, fixing parsing errors leading to crashes. Essential patch available.. SUSE Linux Protobuf Update, CVE-2025-4565 Patch, Security Alert SUSE, Protobuf Crash Vulnerability. . LinuxSecurity.com Team
Oct 22, 2025
SuSE
89
security advisoryfedoracriticalFedora 43: Important Fix for Rust Monitord Exporter Protobuf Recursion
Update mirrorlist-server to version 3.0.8. Update the maxminddb crate to version 0.26.0. Update the prometheus crate to version 0.14.0. Update the protobuf and protobuf-codegen crates to version 3.7.2. Initial packaging of the protobuf-parse and protobuf-support crates.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-9e77f6ddcb 2025-10-14 22:21:43.157840+00:00 -------------------------------------------------------------------------------- Name : rust-monitord-exporter Product : Fedora 43 Version : 0.4.1 Release : 6.fc43 URL : https://crates.io/crates/monitord-exporter Summary : Let Prometheus know how happy your systemd is Description : monitord-exporter is a Prometheus exporter using monitord to export statistic to Prometheus collectors. -------------------------------------------------------------------------------- Update Information: Update mirrorlist-server to version 3.0.8. Update the maxminddb crate to version 0.26.0. Update the prometheus crate to version 0.14.0. Update the protobuf and protobuf-codegen crates to version 3.7.2. Initial packaging of the protobuf-parse and protobuf-support crates. This includes fixes for CVE-2025-53605 (Uncontrolled Recursion Vulnerability in the protobuf crate). -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 6 2025 Fabio Valentini - 0.4.1-6 - Add missing type annotation for prometheus 0.14 compatibility -------------------------------------------------------------------------------- References: [ 1 ] Bug #2376751 - CVE-2025-53605 mirrorlist-server: Protobuf: Uncontrolled Recursion Vulnerability [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2376751 [ 2 ] Bug #2401160 - F43FailsToInstall: rust-prometheus+protobuf-codegen-pure-devel https://bugzilla.redhat.com/show_bug.cgi?id=2401160 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-9e77f6ddcb' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Oct 14, 2025
•Critical
Fedora
197
security advisorycriticaldebianDebian 11: Severe Recursion Flaw in libcommons-lang3-java DLA-4286-1
A vulnerability has been discovered in libcommons-lang3-java, a set of Java classes that provide helper methods for standard Java classes. CVE-2025-48924 . ------------------------------------------------------------------------- Debian LTS Advisory DLA-4286-1
Aug 31, 2025
•Critical
Debian LTS
89
security advisoryfedoraupdateFedora 40: FEDORA-2025-05248392g1 urgent: tcpdump overflow
New version 4.2.11. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-04475838f9 2025-03-01 01:38:57.010379+00:00 -------------------------------------------------------------------------------- Name : wireshark Product : Fedora 40 Version : 4.2.11 Release : 1.fc40 URL : http://www.wireshark.org/ Summary : Network traffic analyzer Description : Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless (WiFi or Bluetooth) networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. It has many powerful features including a rich display filter language and the ability to reassemble multiple protocol packets in order to, for example, view a complete TCP stream, save the contents of a file which was transferred over HTTP or CIFS, or play back an RTP audio stream. -------------------------------------------------------------------------------- Update Information: New version 4.2.11 -------------------------------------------------------------------------------- ChangeLog: * Thu Feb 20 2025 Michal Ruprich - 1:4.2.11-1 - New version 4.2.11 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2346670 - wireshark-4.4.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2346670 [ 2 ] Bug #2346741 - CVE-2025-1492 wireshark: Uncontrolled Recursion in Wireshark [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2346741 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-04475838f9' at the command line. For more information, refer to the dnf documentation availableat http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Mar 01, 2025
•Critical
Fedora
100
security advisorymoderateupdateopenSUSE Leap 15.4 SUSE-SU-2023:4270-1 Moderate Poppler Crash Fix
* bsc#1128114 * bsc#1214726 Cross-References: * CVE-2019-9545 . # Security update for poppler Announcement ID: SUSE-SU-2023:4270-1 Rating: moderate References: * bsc#1128114 * bsc#1214726 Cross-References: * CVE-2019-9545 * CVE-2022-37052 CVSS scores: * CVE-2019-9545 ( SUSE ): 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2019-9545 ( NVD ): 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2022-37052 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 An update that solves two vulnerabilities can now be installed. ## Description: This update for poppler fixes the following issues: * CVE-2019-9545: Fixed an uncontrolled recursion issue that could cause a crash (bsc#1128114). * CVE-2022-37052: Fixed a crash that could be triggered when opening a crafted file (bsc#1214726). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4270=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * libpoppler73-0.62.0-150000.4.31.1 * libpoppler73-debuginfo-0.62.0-150000.4.31.1 * openSUSE Leap 15.4 (x86_64) * libpoppler73-32bit-debuginfo-0.62.0-150000.4.31.1 * libpoppler73-32bit-0.62.0-150000.4.31.1 ## References: * https://www.suse.com/security/cve/CVE-2019-9545.html * https://www.suse.com/security/cve/CVE-2022-37052.html * https://bugzilla.suse.com/show_bug.cgi?id=1128114 * https://bugzilla.suse.com/show_bug.cgi?id=1214726 . SUSE releases a significant security patch for libpng, tackling flaws that could cause application instability and excessive memory usage in Leap 15.4.. poppler update,SUSE security advisory,openSUSE vulnerabilities. . LinuxSecurity.com Team
Oct 30, 2023
SuSE
197
security advisorysecurity updatedebianDebian 9: DLA-2872-1 Urgent: Agg Stack Overflow Resolution Released
Stack overflow due to infinite recursion was fixed in agg, the Anti-Grain Geometry graphical toolkit. For Debian 9 stretch, this problem has been fixed in version . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-2872-1
Dec 30, 2021
•Critical
Debian LTS
202
security advisorymoderateupdateopenSUSE: 2021:3123-1 Moderate Update for libcroco Recursion Issue
An update that fixes one vulnerability is now available. . openSUSE Security Update: Security update for libcroco ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:3123-1 Rating: moderate References: #1171685 Cross-References: CVE-2020-12825 CVSS scores: CVE-2020-12825 (NVD) : 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H CVE-2020-12825 (SUSE): 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libcroco fixes the following issues: - CVE-2020-12825: Fixed recursion issue in block and any productions (bsc#1171685). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-3123=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libcroco-0.6.13-3.3.1 libcroco-0_6-3-0.6.13-3.3.1 libcroco-0_6-3-debuginfo-0.6.13-3.3.1 libcroco-debuginfo-0.6.13-3.3.1 libcroco-debugsource-0.6.13-3.3.1 libcroco-devel-0.6.13-3.3.1 - openSUSE Leap 15.3 (x86_64): libcroco-0_6-3-32bit-0.6.13-3.3.1 libcroco-0_6-3-32bit-debuginfo-0.6.13-3.3.1 References: https://www.suse.com/security/cve/CVE-2020-12825.html https://bugzilla.suse.com/1171685 . openSUSE Security Patch for libcroco tackles a notable recursion vulnerability, enhancing both system reliability and security.. openSUSE Security Update, libcroco patch, recursion fix, update installation. . LinuxSecurity.com Team
Sep 16, 2021
OpenSUSE
89
security advisoryupdatecriticalFedora 34: 2021-372d83d54e Critical Stack Overflow in hivex
New upstream version 1.3.21. Fixes CVE-2021-3622 limit recursion in ri-records.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-372d83d54e 2021-08-18 01:09:52.132997 --------------------------------------------------------------------------------Name : hivex Product : Fedora 34 Version : 1.3.21 Release : 1.fc34 URL : https://libguestfs.org/ Summary : Read and write Windows Registry binary hive files Description : Hive files are the undocumented binary files that Windows uses to store the Windows Registry on disk. Hivex is a library that can read and write to these files. 'hivexsh' is a shell you can use to interactively navigate a hive binary file. 'hivexregedit' (in perl-hivex) lets you export and merge to the textual regedit format. 'hivexml' can be used to convert a hive file to a more useful XML format. In order to get access to the hive files themselves, you can copy them from a Windows machine. They are usually found in %systemroot%\system32\config. For virtual machines we recommend using libguestfs or guestfish to copy out these files. libguestfs also provides a useful high-level tool called 'virt-win-reg' (based on hivex technology) which can be used to query specific registry keys in an existing Windows VM. For OCaml bindings, see 'ocaml-hivex-devel'. For Perl bindings, see 'perl-hivex'. For Python 3 bindings, see 'python3-hivex'. For Ruby bindings, see 'ruby-hivex'. --------------------------------------------------------------------------------Update Information: New upstream version 1.3.21. Fixes CVE-2021-3622 limit recursion in ri-records. --------------------------------------------------------------------------------ChangeLog: * Mon Aug 2 2021 Richard W.M. Jones - 1.3.21-1 - New upstream version 1.3.21. - Fixes CVE-2021-3622 limit recursion inri-records. --------------------------------------------------------------------------------References: [ 1 ] Bug #1975489 - CVE-2021-3622 hivex: stack overflow due to recursive call of _get_children() https://bugzilla.redhat.com/show_bug.cgi?id=1975489 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-372d83d54e' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Aug 17, 2021
•Critical
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!