Threat database

A security update for WebKit2GTK3 addresses vulnerabilities equivalent to those in Red Hat advisory RHSA-2025:13782. The update is provided by the SUSE Product Security Team. No specific affected versions or detailed technical information are provided. The severity is assessed as high. No known exploits in the wild have been reported.

A security update for the SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel addresses multiple security vulnerabilities and various non-security bugs. The update fixes a range of issues including out-of-bounds reads, memory leaks, use-after-free bugs, potential division by zero, and other kernel-level flaws. No known exploits in the wild have been reported. The update is a comprehensive security and stability improvement for the affected SUSE Linux Enterprise Micro kernel versions.

A security update for GIMP addresses vulnerabilities referenced by Red Hat advisory RHSA-2025:9162. The update is provided by the SUSE Product Security Team and relates to CVE-2025-48797. No specific affected versions or detailed technical information are provided in the input data.

A security update for SUSE related to dotnet9.0 addresses a vulnerability identified as CVE-2025-30399. This update provides a functional equivalent of the Red Hat advisory RHSA-2025:8817. No specific affected versions or detailed technical information are provided in the available data.

A vulnerability in Helm allows a specially crafted JSON schema to cause a stack overflow. This issue affects specific versions of the product and is identified as CVE-2025-32387. No CVSS score or detailed technical exploitation information is currently available. No patch or remediation guidance has been provided yet by the vendor.

This is a security update for PHP provided by the SUSE Product Security Team, addressing vulnerabilities referenced in Red Hat advisory RHSA-2025:7432. The update is intended to provide a functional equivalent fix for the issues described in that advisory. No specific affected versions or technical details are provided in the input data. The severity is assessed as medium.

A security update for Thunderbird addresses vulnerabilities referenced in Red Hat advisory RHSA-2025:2899. The update is provided by the SUSE Product Security Team and relates to multiple CVEs including CVE-2025-1937. No specific affected versions or detailed technical information are provided in this summary.

This security update for Mozilla Thunderbird addresses multiple vulnerabilities including memory safety issues, use-after-free bugs, overflow conditions, and logic errors. The update corresponds to Mozilla Thunderbird version 128.8 and includes fixes for CVE-2024-43097 and several CVE-2025 series vulnerabilities. Additional performance and usability improvements are also included.

This is a security update for Firefox provided by the SUSE Product Security Team, addressing multiple CVEs including CVE-2025-1930. The update corresponds functionally to a Red Hat advisory RHSA-2025:2359. No specific affected versions or detailed vulnerability descriptions are provided in the input data.

SUSE Linux Enterprise 15 SP4 RT kernel received a security update addressing multiple vulnerabilities, including use-after-free bugs, dangling pointer issues, and parsing errors across various kernel subsystems such as memory management, media, networking, and storage. These fixes resolve potential stability and security issues in the kernel. The update also includes several non-security bug fixes improving NFS and other kernel components.

This security update for Chromium addresses multiple vulnerabilities including use-after-free flaws in Skia and V8 components, as well as an inappropriate implementation in the Extensions API. The stable version 133.0.6943.53 released on 2024-02-04 contains these fixes. No CVSS score is provided, but the issues are rated as high severity.

This is a security update for the Thunderbird email client provided by the SUSE Product Security Team. It corresponds functionally to the Red Hat advisory RHSA-2025:1184. The update addresses multiple vulnerabilities identified by CVE-2025-0510 and related CVEs. No specific affected versions are stated in the provided data. No CVSS score is available, but the severity is indicated as high.

This is a security update for Firefox provided by the SUSE Product Security Team, addressing vulnerabilities referenced in Red Hat advisory RHSA-2025:1066. The update is related to CVE-2025-1009 and several other CVEs in the 2025 series. No specific affected versions or detailed technical information are provided in the input data.

A security update has been issued for the keepalived component by the SUSE Product Security Team. This update provides a functional equivalent of the Red Hat advisory RHSA-2025:0917. No specific affected versions or detailed vulnerability information is provided in the available data.

A security update for git-lfs addresses a vulnerability tracked as CVE-2024-53263. This update is functionally equivalent to the Red Hat advisory RHSA-2025:0673. No specific technical details or affected versions are provided in the input data.

A security update for Chromium version 132.0.6834.83 addresses multiple vulnerabilities including out of bounds memory access, integer overflow, stack buffer overflow, race conditions, and inappropriate implementations in various components such as V8, Navigation, Skia, Metrics, Tracing, Frames, Fullscreen, Fenced Frames, Payments, and Extensions. The update was released on 2024-01-14 by the SUSE Product Security Team. No specific affected versions are stated beyond this update. No CVSS score is provided, but the severity is assessed as high.

SUSE Linux Enterprise 15 SP6 RT kernel received a security update addressing multiple vulnerabilities across various kernel components, including SCSI, netfilter, vsock, memory management, and others. The update fixes issues such as potential crashes, memory leaks, use-after-free, null pointer dereferences, and race conditions. These fixes improve kernel stability and security by resolving bugs that could lead to system crashes or memory corruption. The update also includes non-security bug fixes related to ACPI and other kernel subsystems.