openSUSE-SU-2025:0094-1: moderate: Security update for gitea-tea
openSUSE-SU-2025:14911-1: moderate: tomcat-9.0.102-1.1 on GA media
openSUSE-SU-2025:14909-1: moderate: apptainer-1.3.6-5.1 on GA media
openSUSE-SU-2025:0094-1: moderate: Security update for gitea-tea
openSUSE Security Update: Security update for gitea-tea
_______________________________
Announcement ID: openSUSE-SU-2025:0094-1
Rating: moderate
References: #1234598 #1235367 #1239493
Cross-References: CVE-2024-45337 CVE-2024-45338 CVE-2025-22869
CVSS scores:
CVE-2024-45337 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVE-2024-45338 (SUSE): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVE-2025-22869 (SUSE): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Affected Products:
openSUSE Backports SLE-15-SP6
_______________________________
An update that fixes three vulnerabilities is now available.
Description:
This update for gitea-tea fixes the following issues:
- gitea-te: update newer dependencies to fix security issues (boo#1235367
boo#1239493 boo#1234598)
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Backports SLE-15-SP6:
zypper in -t patch openSUSE-2025-94=1
Package List:
- openSUSE Backports SLE-15-SP6 (aarch64 i586 ppc64le s390x x86_64):
gitea-tea-0.9.2-bp156.5.1
- openSUSE Backports SLE-15-SP6 (noarch):
gitea-tea-bash-completion-0.9.2-bp156.5.1
gitea-tea-zsh-completion-0.9.2-bp156.5.1
References:
https://www.suse.com/security/cve/CVE-2024-45337.html
https://www.suse.com/security/cve/CVE-2024-45338.html
https://www.suse.com/security/cve/CVE-2025-22869.html
https://bugzilla.suse.com/1234598
https://bugzilla.suse.com/1235367
https://bugzilla.suse.com/1239493
openSUSE-SU-2025:14911-1: moderate: tomcat-9.0.102-1.1 on GA media
# tomcat-9.0.102-1.1 on GA media
Announcement ID: openSUSE-SU-2025:14911-1
Rating: moderate
Cross-References:
* CVE-2024-52317
CVSS scores:
* CVE-2024-52317 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
* CVE-2024-52317 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
Affected Products:
* openSUSE Tumbleweed
An update that solves one vulnerability can now be installed.
## Description:
These are all security issues fixed in the tomcat-9.0.102-1.1 package on the GA media of openSUSE Tumbleweed.
## Package List:
* openSUSE Tumbleweed:
* tomcat 9.0.102-1.1
* tomcat-admin-webapps 9.0.102-1.1
* tomcat-docs-webapp 9.0.102-1.1
* tomcat-el-3_0-api 9.0.102-1.1
* tomcat-embed 9.0.102-1.1
* tomcat-javadoc 9.0.102-1.1
* tomcat-jsp-2_3-api 9.0.102-1.1
* tomcat-jsvc 9.0.102-1.1
* tomcat-lib 9.0.102-1.1
* tomcat-servlet-4_0-api 9.0.102-1.1
* tomcat-webapps 9.0.102-1.1
## References:
* https://www.suse.com/security/cve/CVE-2024-52317.html
openSUSE-SU-2025:14909-1: moderate: apptainer-1.3.6-5.1 on GA media
# apptainer-1.3.6-5.1 on GA media
Announcement ID: openSUSE-SU-2025:14909-1
Rating: moderate
Cross-References:
* CVE-2024-41110
* CVE-2024-45337
* CVE-2024-45338
* CVE-2025-22869
* CVE-2025-22870
* CVE-2025-27144
CVSS scores:
* CVE-2024-41110 ( SUSE ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
* CVE-2024-45337 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2024-45338 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2024-45338 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2025-22869 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2025-22869 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2025-22870 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
* CVE-2025-22870 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2025-27144 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2025-27144 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Affected Products:
* openSUSE Tumbleweed
An update that solves 6 vulnerabilities can now be installed.
## Description:
These are all security issues fixed in the apptainer-1.3.6-5.1 package on the GA media of openSUSE Tumbleweed.
## Package List:
* openSUSE Tumbleweed:
* apptainer 1.3.6-5.1
* apptainer-leap 1.3.6-5.1
* apptainer-sle15_5 1.3.6-5.1
* apptainer-sle15_6 1.3.6-5.1
* apptainer-sle15_7 1.3.6-5.1
## References:
* https://www.suse.com/security/cve/CVE-2024-41110.html
* https://www.suse.com/security/cve/CVE-2024-45337.html
* https://www.suse.com/security/cve/CVE-2024-45338.html
* https://www.suse.com/security/cve/CVE-2025-22869.html
* https://www.suse.com/security/cve/CVE-2025-22870.html
* https://www.suse.com/security/cve/CVE-2025-27144.html
