A NULL pointer dereference vulnerability (CVE-2024-26130) exists in the python-cryptography library's pkcs12.serialize_key_and_certificates function when called with a non-matching certificate and private key along with an hmac_hash override. This flaw can cause a denial of service by crashing applications using the library. The issue affects cryptography versions prior to 50.0.0. Red Hat has released security updates for their python3.12-cryptography packages to address this vulnerability.
A buffer size overflow vulnerability in the Linux kernel's udmabuf component has been fixed by casting the size_limit_mb to a 64-bit unsigned integer during pglimit calculation. This issue affects certain versions of the Linux kernel used in Red Hat Enterprise Linux 9 and SUSE products. The vulnerability has been assigned CVE-2025-37803 and is rated with high severity. A security update is available and should be applied, requiring a system reboot for the fix to take effect.
Multiple security issues have been fixed in the libQt5Pdf5-5.15.19-1.1 package on the GA media of openSUSE Tumbleweed. These vulnerabilities affect the SUSE product and have been collectively addressed in this package update. No specific affected versions are detailed, and no CVSS score is provided. The overall severity is assessed as medium based on the information available.
A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of openSUSE Tumbleweed traefik2 allows the traefik user to escalate to root. This issue affects Tumbleweed: from ? before 2.11.29.
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: crypto: algif_hash - fix double free in hash_accept (CVE-2025-38079)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Multiple security vulnerabilities in PostgreSQL allow arbitrary code execution during the restore operation. These issues, identified as CVE-2025-8714 and CVE-2025-8715, affect PostgreSQL packages distributed with Red Hat Enterprise Linux 9 and related variants. A security update addressing these vulnerabilities is available from Red Hat. The vulnerabilities have been rated with high severity by the vendor.
Mozilla Thunderbird is a standalone mail and newsgroup client.
Security Fix(es):
* firefox: thunderbird: Denial-of-service due to out-of-memory in the Graphics: WebRender component (CVE-2025-9182)
* thunderbird: firefox: Sandbox escape due to invalid pointer in the Audio/Video: GMP component (CVE-2025-9179)
* thunderbird: firefox: Same-origin policy bypass in the Graphics: Canvas2D component (CVE-2025-9180)
* thunderbird: firefox: Uninitialized memory in the JavaScript Engine component (CVE-2025-9181)
* thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142 (CVE-2025-9185)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Multiple denial of service (DoS) vulnerabilities and a security constraint bypass issue have been identified in Apache Tomcat and Apache Commons FileUpload components used in Red Hat Enterprise Linux 9. These include DoS via multipart upload, HTTP/2 control frames, and part headers, as well as a security constraint bypass for pre/post-resources. Red Hat has issued an important security advisory with updates to address these issues.
A mismatch caused by client-triggered server-sent stream resets between HTTP/2 specifications and the internal architectures of some HTTP/2 implementations may result in excessive server resource consumption leading to denial-of-service (DoS). By opening streams and then rapidly triggering the server to reset them—using malformed frames or flow control errors—an attacker can exploit incorrect stream accounting. Streams reset by the server are considered closed at the protocol level, even though backend processing continues. This allows a client to cause the server to handle an unbounded number of concurrent streams on a single connection. This CVE will be updated as affected product details are released.
This is a security update for WebKit2GTK3 addressing vulnerabilities referenced in Red Hat advisory RHSA-2025:13780. The update is provided by the SUSE Product Security Team and relates to multiple CVEs including CVE-2025-31273. No specific affected versions or technical details are provided in the input data.
Mozilla Thunderbird is a standalone mail and newsgroup client.
Security Fix(es):
* firefox: thunderbird: Large branch table could lead to truncated instruction (CVE-2025-8028)
* firefox: thunderbird: Memory safety bugs (CVE-2025-8035)
* firefox: thunderbird: Incorrect URL stripping in CSP reports (CVE-2025-8031)
* firefox: thunderbird: JavaScript engine only wrote partial return value to stack (CVE-2025-8027)
* firefox: thunderbird: Potential user-assisted code execution in ?Copy as cURL? command (CVE-2025-8030)
* firefox: Memory safety bugs (CVE-2025-8034)
* firefox: thunderbird: Incorrect JavaScript state machine for generators (CVE-2025-8033)
* firefox: thunderbird: XSLT documents could bypass CSP (CVE-2025-8032)
* firefox: thunderbird: javascript: URLs executed on object and embed tags (CVE-2025-8029)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Two heap-based buffer overflow vulnerabilities were identified in the Open Asset Import Library (assimp) components used by Qt 3D, specifically in LWOAnimation.cpp and ASEParser.cpp. These vulnerabilities affect the qt5-qt3d package in Red Hat Enterprise Linux 9 and related distributions. The issues have been assigned CVE identifiers CVE-2025-3158 and CVE-2025-3159. Red Hat has released security updates addressing these vulnerabilities.
A Plaintext Storage of a Password vulnerability in SUSE exposes the credentials for the HTTP proxy in the log files. This issue affects Container suse/manager/4.3/proxy-httpd:4.3.16.9.67.1: from ? before 4.3.33-150400.3.55.2; Container suse/manager/5.0/x86_64/proxy-httpd:5.0.5.7.23.1: from ? before 5.0.14-150600.4.17.1; Container suse/manager/5.0/x86_64/server:5.0.5.7.30.1: from ? before 5.0.14-150600.4.17.1; Image SLES15-SP4-Manager-Proxy-4-3-BYOS: from ? before 4.3.33-150400.3.55.2; Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure: from ? before 4.3.33-150400.3.55.2; Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2: from ? before 4.3.33-150400.3.55.2; Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE: from ? before 4.3.33-150400.3.55.2; Image SLES15-SP4-Manager-Server-4-3-BYOS: from ? before 4.3.33-150400.3.55.2; Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure: from ? before 4.3.33-150400.3.55.2; Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2: from ? before 4.3.33-150400.3.55.2; Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE: from ? before 4.3.33-150400.3.55.2; SUSE Manager Proxy Module 4.3: from ? before 4.3.33-150400.3.55.2; SUSE Manager Server Module 4.3: from ? before 4.3.33-150400.3.55.2.
KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. It supports loading URLs from the scheme handlers such as a ssh:// or telnet:// or rlogin:// URL. This can be executed regardless of whether the ssh, telnet, or rlogin binary is available. In this mode, there is a code path where if that binary is not available, Konsole falls back to using /bin/bash for the given arguments (i.e., the URL) provided. This allows an attacker to execute arbitrary code.
CVE-2025-46811 is a critical missing authorization vulnerability in SUSE Linux Manager containers and related images. It allows any unauthenticated user who can connect to port 443 of the SUSE Manager server to execute arbitrary commands as root on any client. This affects multiple SUSE Manager container images and server modules prior to specified patch versions. The vulnerability has a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability. No known exploits are reported in the wild at this time. Patch status is not confirmed as no patch links or vendor advisory details are provided.