SUSE-SU-2025:1520-1: important: Security update for govulncheck-vulndb
SUSE-SU-2025:1521-1: important: Security update for tomcat
SUSE-SU-2025:1523-1: moderate: Security update for python-Django
openSUSE-SU-2025:0147-1: moderate: Security update for mozjs102
openSUSE-SU-2025:0148-1: important: Security update for chromium
openSUSE-SU-2025:15066-1: moderate: ldap-proxy-0.1.0~90-1.1 on GA media
SUSE-SU-2025:1520-1: important: Security update for govulncheck-vulndb
# Security update for govulncheck-vulndb
Announcement ID: SUSE-SU-2025:1520-1
Release Date: 2025-05-09T01:08:25Z
Rating: important
References:
* jsc#PED-11136
Affected Products:
* openSUSE Leap 15.6
* SUSE Linux Enterprise Desktop 15 SP6
* SUSE Linux Enterprise Real Time 15 SP6
* SUSE Linux Enterprise Server 15 SP6
* SUSE Linux Enterprise Server for SAP Applications 15 SP6
* SUSE Package Hub 15 15-SP6
An update that contains one feature can now be installed.
## Description:
This update for govulncheck-vulndb fixes the following issues:
* Update to version 0.0.20250506T153719 2025-05-06T15:37:19Z (jsc#PED-11136)
* GO-2025-3656
* GO-2025-3661
* GO-2025-3662
* GO-2025-3663
* GO-2025-3665
* Update to version 0.0.20250505T161433 2025-05-05T16:14:33Z (jsc#PED-11136)
* GO-2025-3645
* GO-2025-3646
* GO-2025-3647
* GO-2025-3648
* GO-2025-3649
* GO-2025-3650
* GO-2025-3652
* GO-2025-3660
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* openSUSE Leap 15.6
zypper in -t patch openSUSE-SLE-15.6-2025-1520=1
* SUSE Package Hub 15 15-SP6
zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-1520=1
## Package List:
* openSUSE Leap 15.6 (noarch)
* govulncheck-vulndb-0.0.20250506T153719-150000.1.71.1
* SUSE Package Hub 15 15-SP6 (noarch)
* govulncheck-vulndb-0.0.20250506T153719-150000.1.71.1
## References:
* https://jira.suse.com/browse/PED-11136
SUSE-SU-2025:1521-1: important: Security update for tomcat
# Security update for tomcat
Announcement ID: SUSE-SU-2025:1521-1
Release Date: 2025-05-09T04:57:04Z
Rating: important
References:
* bsc#1242008
* bsc#1242009
Cross-References:
* CVE-2025-31650
* CVE-2025-31651
CVSS scores:
* CVE-2025-31650 ( SUSE ): 8.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2025-31650 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2025-31650 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2025-31650 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2025-31651 ( SUSE ): 8.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
* CVE-2025-31651 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
* CVE-2025-31651 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2025-31651 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products:
* openSUSE Leap 15.6
* SUSE Enterprise Storage 7.1
* SUSE Linux Enterprise High Performance Computing 15 SP3
* SUSE Linux Enterprise High Performance Computing 15 SP4
* SUSE Linux Enterprise High Performance Computing 15 SP5
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP3
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5
* SUSE Linux Enterprise Server 15 SP3
* SUSE Linux Enterprise Server 15 SP3 LTSS
* SUSE Linux Enterprise Server 15 SP4
* SUSE Linux Enterprise Server 15 SP4 LTSS
* SUSE Linux Enterprise Server 15 SP5
* SUSE Linux Enterprise Server 15 SP5 LTSS
* SUSE Linux Enterprise Server 15 SP6
* SUSE Linux Enterprise Server for SAP Applications 15 SP3
* SUSE Linux Enterprise Server for SAP Applications 15 SP4
* SUSE Linux Enterprise Server for SAP Applications 15 SP5
* SUSE Linux Enterprise Server for SAP Applications 15 SP6
* SUSE Manager Server 4.3
* Web and Scripting Module 15-SP6
An update that solves two vulnerabilities can now be installed.
## Description:
This update for tomcat fixes the following issues:
Update to Tomcat 9.0.104
* CVE-2025-31650: invalid priority field values should be ignored
(bsc#1242008)
* CVE-2025-31651: Better handling of URLs with literal ';' and '?'
(bsc#1242009)
Full changelog:
https://tomcat.apache.org/tomcat-9.0-doc/changelog.htm
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* openSUSE Leap 15.6
zypper in -t patch openSUSE-SLE-15.6-2025-1521=1
* Web and Scripting Module 15-SP6
zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP6-2025-1521=1
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP3
zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-1521=1
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4
zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-1521=1
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4
zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-1521=1
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5
zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-1521=1
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5
zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-1521=1
* SUSE Linux Enterprise Server 15 SP3 LTSS
zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2025-1521=1
* SUSE Linux Enterprise Server 15 SP4 LTSS
zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-1521=1
* SUSE Linux Enterprise Server 15 SP5 LTSS
zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-1521=1
* SUSE Linux Enterprise Server for SAP Applications 15 SP3
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2025-1521=1
* SUSE Linux Enterprise Server for SAP Applications 15 SP4
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2025-1521=1
* SUSE Linux Enterprise Server for SAP Applications 15 SP5
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-1521=1
* SUSE Manager Server 4.3
zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2025-1521=1
* SUSE Enterprise Storage 7.1
zypper in -t patch SUSE-Storage-7.1-2025-1521=1
## Package List:
* openSUSE Leap 15.6 (noarch)
* tomcat-docs-webapp-9.0.104-150200.81.1
* tomcat-el-3_0-api-9.0.104-150200.81.1
* tomcat-lib-9.0.104-150200.81.1
* tomcat-embed-9.0.104-150200.81.1
* tomcat-9.0.104-150200.81.1
* tomcat-jsvc-9.0.104-150200.81.1
* tomcat-servlet-4_0-api-9.0.104-150200.81.1
* tomcat-jsp-2_3-api-9.0.104-150200.81.1
* tomcat-webapps-9.0.104-150200.81.1
* tomcat-admin-webapps-9.0.104-150200.81.1
* tomcat-javadoc-9.0.104-150200.81.1
* Web and Scripting Module 15-SP6 (noarch)
* tomcat-el-3_0-api-9.0.104-150200.81.1
* tomcat-9.0.104-150200.81.1
* tomcat-servlet-4_0-api-9.0.104-150200.81.1
* tomcat-jsp-2_3-api-9.0.104-150200.81.1
* tomcat-webapps-9.0.104-150200.81.1
* tomcat-admin-webapps-9.0.104-150200.81.1
* tomcat-lib-9.0.104-150200.81.1
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch)
* tomcat-el-3_0-api-9.0.104-150200.81.1
* tomcat-9.0.104-150200.81.1
* tomcat-servlet-4_0-api-9.0.104-150200.81.1
* tomcat-jsp-2_3-api-9.0.104-150200.81.1
* tomcat-webapps-9.0.104-150200.81.1
* tomcat-admin-webapps-9.0.104-150200.81.1
* tomcat-lib-9.0.104-150200.81.1
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch)
* tomcat-el-3_0-api-9.0.104-150200.81.1
* tomcat-9.0.104-150200.81.1
* tomcat-servlet-4_0-api-9.0.104-150200.81.1
* tomcat-jsp-2_3-api-9.0.104-150200.81.1
* tomcat-webapps-9.0.104-150200.81.1
* tomcat-admin-webapps-9.0.104-150200.81.1
* tomcat-lib-9.0.104-150200.81.1
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch)
* tomcat-el-3_0-api-9.0.104-150200.81.1
* tomcat-9.0.104-150200.81.1
* tomcat-servlet-4_0-api-9.0.104-150200.81.1
* tomcat-jsp-2_3-api-9.0.104-150200.81.1
* tomcat-webapps-9.0.104-150200.81.1
* tomcat-admin-webapps-9.0.104-150200.81.1
* tomcat-lib-9.0.104-150200.81.1
* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch)
* tomcat-el-3_0-api-9.0.104-150200.81.1
* tomcat-9.0.104-150200.81.1
* tomcat-servlet-4_0-api-9.0.104-150200.81.1
* tomcat-jsp-2_3-api-9.0.104-150200.81.1
* tomcat-webapps-9.0.104-150200.81.1
* tomcat-admin-webapps-9.0.104-150200.81.1
* tomcat-lib-9.0.104-150200.81.1
* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch)
* tomcat-el-3_0-api-9.0.104-150200.81.1
* tomcat-9.0.104-150200.81.1
* tomcat-servlet-4_0-api-9.0.104-150200.81.1
* tomcat-jsp-2_3-api-9.0.104-150200.81.1
* tomcat-webapps-9.0.104-150200.81.1
* tomcat-admin-webapps-9.0.104-150200.81.1
* tomcat-lib-9.0.104-150200.81.1
* SUSE Linux Enterprise Server 15 SP3 LTSS (noarch)
* tomcat-el-3_0-api-9.0.104-150200.81.1
* tomcat-9.0.104-150200.81.1
* tomcat-servlet-4_0-api-9.0.104-150200.81.1
* tomcat-jsp-2_3-api-9.0.104-150200.81.1
* tomcat-webapps-9.0.104-150200.81.1
* tomcat-admin-webapps-9.0.104-150200.81.1
* tomcat-lib-9.0.104-150200.81.1
* SUSE Linux Enterprise Server 15 SP4 LTSS (noarch)
* tomcat-el-3_0-api-9.0.104-150200.81.1
* tomcat-9.0.104-150200.81.1
* tomcat-servlet-4_0-api-9.0.104-150200.81.1
* tomcat-jsp-2_3-api-9.0.104-150200.81.1
* tomcat-webapps-9.0.104-150200.81.1
* tomcat-admin-webapps-9.0.104-150200.81.1
* tomcat-lib-9.0.104-150200.81.1
* SUSE Linux Enterprise Server 15 SP5 LTSS (noarch)
* tomcat-el-3_0-api-9.0.104-150200.81.1
* tomcat-9.0.104-150200.81.1
* tomcat-servlet-4_0-api-9.0.104-150200.81.1
* tomcat-jsp-2_3-api-9.0.104-150200.81.1
* tomcat-webapps-9.0.104-150200.81.1
* tomcat-admin-webapps-9.0.104-150200.81.1
* tomcat-lib-9.0.104-150200.81.1
* SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch)
* tomcat-el-3_0-api-9.0.104-150200.81.1
* tomcat-9.0.104-150200.81.1
* tomcat-servlet-4_0-api-9.0.104-150200.81.1
* tomcat-jsp-2_3-api-9.0.104-150200.81.1
* tomcat-webapps-9.0.104-150200.81.1
* tomcat-admin-webapps-9.0.104-150200.81.1
* tomcat-lib-9.0.104-150200.81.1
* SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch)
* tomcat-el-3_0-api-9.0.104-150200.81.1
* tomcat-9.0.104-150200.81.1
* tomcat-servlet-4_0-api-9.0.104-150200.81.1
* tomcat-jsp-2_3-api-9.0.104-150200.81.1
* tomcat-webapps-9.0.104-150200.81.1
* tomcat-admin-webapps-9.0.104-150200.81.1
* tomcat-lib-9.0.104-150200.81.1
* SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch)
* tomcat-el-3_0-api-9.0.104-150200.81.1
* tomcat-9.0.104-150200.81.1
* tomcat-servlet-4_0-api-9.0.104-150200.81.1
* tomcat-jsp-2_3-api-9.0.104-150200.81.1
* tomcat-webapps-9.0.104-150200.81.1
* tomcat-admin-webapps-9.0.104-150200.81.1
* tomcat-lib-9.0.104-150200.81.1
* SUSE Manager Server 4.3 (noarch)
* tomcat-el-3_0-api-9.0.104-150200.81.1
* tomcat-9.0.104-150200.81.1
* tomcat-servlet-4_0-api-9.0.104-150200.81.1
* tomcat-jsp-2_3-api-9.0.104-150200.81.1
* tomcat-webapps-9.0.104-150200.81.1
* tomcat-admin-webapps-9.0.104-150200.81.1
* tomcat-lib-9.0.104-150200.81.1
* SUSE Enterprise Storage 7.1 (noarch)
* tomcat-el-3_0-api-9.0.104-150200.81.1
* tomcat-9.0.104-150200.81.1
* tomcat-servlet-4_0-api-9.0.104-150200.81.1
* tomcat-jsp-2_3-api-9.0.104-150200.81.1
* tomcat-webapps-9.0.104-150200.81.1
* tomcat-admin-webapps-9.0.104-150200.81.1
* tomcat-lib-9.0.104-150200.81.1
## References:
* https://www.suse.com/security/cve/CVE-2025-31650.html
* https://www.suse.com/security/cve/CVE-2025-31651.html
* https://bugzilla.suse.com/show_bug.cgi?id=1242008
* https://bugzilla.suse.com/show_bug.cgi?id=1242009
SUSE-SU-2025:1523-1: moderate: Security update for python-Django
# Security update for python-Django
Announcement ID: SUSE-SU-2025:1523-1
Release Date: 2025-05-09T11:27:33Z
Rating: moderate
References:
* bsc#1242210
Cross-References:
* CVE-2025-32873
CVSS scores:
* CVE-2025-32873 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2025-32873 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected Products:
* openSUSE Leap 15.6
* SUSE Linux Enterprise Desktop 15 SP6
* SUSE Linux Enterprise Real Time 15 SP6
* SUSE Linux Enterprise Server 15 SP6
* SUSE Linux Enterprise Server for SAP Applications 15 SP6
* SUSE Package Hub 15 15-SP6
An update that solves one vulnerability can now be installed.
## Description:
This update for python-Django fixes the following issues:
* CVE-2025-32873: Fixed denial-of-service possibility in `strip_tags()`
(bsc#1242210)
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* openSUSE Leap 15.6
zypper in -t patch openSUSE-SLE-15.6-2025-1523=1 SUSE-2025-1523=1
* SUSE Package Hub 15 15-SP6
zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-1523=1
## Package List:
* openSUSE Leap 15.6 (noarch)
* python311-Django-4.2.11-150600.3.21.1
* SUSE Package Hub 15 15-SP6 (noarch)
* python311-Django-4.2.11-150600.3.21.1
## References:
* https://www.suse.com/security/cve/CVE-2025-32873.html
* https://bugzilla.suse.com/show_bug.cgi?id=1242210
openSUSE-SU-2025:0147-1: moderate: Security update for mozjs102
openSUSE Security Update: Security update for mozjs102
_______________________________
Announcement ID: openSUSE-SU-2025:0147-1
Rating: moderate
References: #1234837
Cross-References: CVE-2024-56431
CVSS scores:
CVE-2024-56431 (SUSE): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Affected Products:
openSUSE Backports SLE-15-SP6
_______________________________
An update that fixes one vulnerability is now available.
Description:
This update for mozjs102 fixes the following issue:
- CVE-2024-56431: avoid negative shift in huffdec.c (bsc#1234837).
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Backports SLE-15-SP6:
zypper in -t patch openSUSE-2025-147=1
Package List:
- openSUSE Backports SLE-15-SP6 (aarch64 i686 ppc64le x86_64):
libmozjs-102-0-102.15.1-bp156.3.3.1
mozjs102-102.15.1-bp156.3.3.1
mozjs102-devel-102.15.1-bp156.3.3.1
References:
https://www.suse.com/security/cve/CVE-2024-56431.html
https://bugzilla.suse.com/1234837
openSUSE-SU-2025:0148-1: important: Security update for chromium
openSUSE Security Update: Security update for chromium
_______________________________
Announcement ID: openSUSE-SU-2025:0148-1
Rating: important
References: #1242717
Cross-References: CVE-2025-4372
Affected Products:
openSUSE Backports SLE-15-SP6
_______________________________
An update that fixes one vulnerability is now available.
Description:
This update for chromium fixes the following issues:
Chromium 136.0.7103.92 (boo#1242717)
* CVE-2025-4372: Use after free in WebAudio
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Backports SLE-15-SP6:
zypper in -t patch openSUSE-2025-148=1
Package List:
- openSUSE Backports SLE-15-SP6 (aarch64 x86_64):
chromedriver-136.0.7103.92-bp156.2.116.1
chromium-136.0.7103.92-bp156.2.116.1
References:
https://www.suse.com/security/cve/CVE-2025-4372.html
https://bugzilla.suse.com/1242717
openSUSE-SU-2025:15066-1: moderate: ldap-proxy-0.1.0~90-1.1 on GA media
# ldap-proxy-0.1.0~90-1.1 on GA media
Announcement ID: openSUSE-SU-2025:15066-1
Rating: moderate
Cross-References:
* CVE-2025-3416
CVSS scores:
* CVE-2025-3416 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2025-3416 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Affected Products:
* openSUSE Tumbleweed
An update that solves one vulnerability can now be installed.
## Description:
These are all security issues fixed in the ldap-proxy-0.1.0~90-1.1 package on the GA media of openSUSE Tumbleweed.
## Package List:
* openSUSE Tumbleweed:
* ldap-proxy 0.1.0~90-1.1
## References:
* https://www.suse.com/security/cve/CVE-2025-3416.html
