An update that solves one vulnerability can now be installed.. # Security update for ed25519-java Announcement ID: SUSE-SU-2025:1029-1 Release Date: 2025-03-26T13:11:52Z Rating: important References: * bsc#1239551 Cross-References: * CVE-2020-36843 CVSS scores: * CVE-2020-36843 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2020-36843 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2020-36843 ( NVD ): 4.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N Affected Products: * Development Tools Module 15-SP6 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for ed25519-java fixes the following issues: * CVE-2020-36843: Fixed no check performed on scalar to avoid signature malleability (bsc#1239551) ##Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-1029=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2025-1029=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-1029=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-1029=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-1029=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-1029=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-1029=1 * SUSE Linux Enterprise Server 15 SP3 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2025-1029=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-1029=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-1029=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2025-1029=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2025-1029=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-1029=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2025-1029=1 ## Package List: * openSUSE Leap 15.6 (noarch) * ed25519-java-javadoc-0.3.0-150200.5.9.1 *ed25519-java-0.3.0-150200.5.9.1 * Development Tools Module 15-SP6 (noarch) * ed25519-java-0.3.0-150200.5.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * ed25519-java-0.3.0-150200.5.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * ed25519-java-0.3.0-150200.5.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * ed25519-java-0.3.0-150200.5.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * ed25519-java-0.3.0-150200.5.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * ed25519-java-0.3.0-150200.5.9.1 * SUSE Linux Enterprise Server 15 SP3 LTSS (noarch) * ed25519-java-0.3.0-150200.5.9.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * ed25519-java-0.3.0-150200.5.9.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * ed25519-java-0.3.0-150200.5.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * ed25519-java-0.3.0-150200.5.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * ed25519-java-0.3.0-150200.5.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * ed25519-java-0.3.0-150200.5.9.1 * SUSE Enterprise Storage 7.1 (noarch) * ed25519-java-0.3.0-150200.5.9.1 ## References: * https://www.suse.com/security/cve/CVE-2020-36843.html * https://bugzilla.suse.com/show_bug.cgi?id=1239551 . Update for ed25519-java addresses critical signature issue. Install now to enhance system security and integrity.. update, solves, vulnerability, installed, security, ed25519-java. . Severity: Important. LinuxSecurity.com Team
An update that fixes two vulnerabilities is now available. . SUSE Security Update: Security update for python-ecdsa ______________________________________________________________________________ Announcement ID: SUSE-SU-2019:2891-2 Rating: moderate References: #1153165 #1154217 Cross-References: CVE-2019-14853 CVE-2019-14859 Affected Products: SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP2 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP1 SUSE Linux Enterprise Module for Basesystem 15-SP2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for python-ecdsa to version 0.13.3 fixes the following issues: Security issues fixed: - CVE-2019-14853: Fixed unexpected exceptions during signature decoding (bsc#1153165). - CVE-2019-14859: Fixed a signature malleability caused by insufficient checks of DER encoding (bsc#1154217). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP2: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP2-2020-1877=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP1: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP1-2020-1877=1 - SUSE Linux Enterprise Module for Basesystem 15-SP2: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP2-2020-1877=1 Package List: - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP2 (noarch): python2-ecdsa-0.13.3-3.3.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP1 (noarch): python2-ecdsa-0.13.3-3.3.1 - SUSE Linux Enterprise Module for Basesystem15-SP2 (noarch): python3-ecdsa-0.13.3-3.3.1 References: https://www.suse.com/security/cve/CVE-2019-14853.html https://www.suse.com/security/cve/CVE-2019-14859.html https://bugzilla.suse.com/1153165 https://bugzilla.suse.com/1154217 _______________________________________________ sle-security-updates mailing list
An update that fixes two vulnerabilities is now available.. openSUSE Security Update: Security update for python-ecdsa ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2472-1 Rating: moderate References: #1153165 #1154217 Cross-References: CVE-2019-14853 CVE-2019-14859 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for python-ecdsa to version 0.13.3 fixes the following issues: Security issues fixed: - CVE-2019-14853: Fixed unexpected exceptions during signature decoding (bsc#1153165). - CVE-2019-14859: Fixed a signature malleability caused by insufficient checks of DER encoding (bsc#1154217). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2472=1 Package List: - openSUSE Leap 15.0 (noarch): python2-ecdsa-0.13.3-lp150.2.3.1 python3-ecdsa-0.13.3-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-14853.html https://www.suse.com/security/cve/CVE-2019-14859.html https://bugzilla.suse.com/1153165 https://bugzilla.suse.com/1154217 -- . Update for python-ecdsa fixes two moderate security issues. Recommended for openSUSE Leap 15.0 users to install promptly.. update, security, fixes, vulnerabilities, opensuse. . Severity: Important. LinuxSecurity.com Team
An update that fixes two vulnerabilities is now available.. openSUSE Security Update: Security update for python-ecdsa ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2474-1 Rating: moderate References: #1153165 #1154217 Cross-References: CVE-2019-14853 CVE-2019-14859 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for python-ecdsa to version 0.13.3 fixes the following issues: Security issues fixed: - CVE-2019-14853: Fixed unexpected exceptions during signature decoding (bsc#1153165). - CVE-2019-14859: Fixed a signature malleability caused by insufficient checks of DER encoding (bsc#1154217). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2474=1 Package List: - openSUSE Leap 15.1 (noarch): python2-ecdsa-0.13.3-lp151.3.3.1 python3-ecdsa-0.13.3-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-14853.html https://www.suse.com/security/cve/CVE-2019-14859.html https://bugzilla.suse.com/1153165 https://bugzilla.suse.com/1154217 -- . OpenSUSE has rolled out a critical security patch for python-ecdsa, which resolves two significant vulnerabilities found in the latest version.. openSUSE Update, Python ECDSA Security, Moderate Threat Update. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.