Back Linuxsecurity

SUSE: Multi-Linux Manager Important Update Threat Mitigation 2025:4458

Linuxsecurity •LinuxSecurity Advisories • December 18, 2025

## This update fixes the following issues: dracut-saltboot: * Update to version 1.0.0 * Reboot on salt key timeout (bsc#1237495) * Fixed parsing files with space in the name (bsc#1252100) grafana was updated from version 11.5.5 to 11.5.10: * Security issues fixed: * CVE-2025-47911: Fix parsing HTML documents (bsc#1251454) * CVE-2025-58190: Fix excessive memory consumption (bsc#1251657) * CVE-2025-64751: Drop experimental implementation of authorization Zanzana server/client (bsc#1254113) * CVE-2025-11065: Fixed sensitive information leak in logs (version 11.5.9) (bsc#1250616) * CVE-2025-6023: Fixed cross-site-scripting via scripted dashboards (version 11.5.7) (bsc#1246735) * CVE-2025-6197: Fixed open redirect in organization switching (version 11.5.7) (bsc#1246736) Read the Full Advisory

* bsc#1227577 * bsc#1227579 * bsc#1237495 * bsc#1243611 * bsc#1243704 * bsc#1244027 * bsc#1244127 * bsc#1244534 * bsc#1245099 * bsc#1245302 * bsc#1246068 * bsc#1246320 * bsc#1246553 * bsc#1246586 * bsc#1246662 * bsc#1246735 * bsc#1246736 * bsc#1246738 * bsc#1246789 * bsc#1246882 * bsc#1246906 * bsc#1246925 * bsc#1247688 * bsc#1247721 * bsc#1250616 * bsc#1251044 * bsc#1251138 * bsc#1252100 * jsc#MSQA-1034 Cross- * CVE-2025-11065 * CVE-2025-3415 * CVE-2025-6023 * CVE-2025-6197 CVSS scores: * CVE-2025-11065 ( SUSE ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2025-11065 ( SUSE ): 4.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N * CVE-2025-3415 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N Read the Full Advisory

* CVE-2025-11065 ( SUSE ): 5.7

CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

* CVE-2025-11065 ( SUSE ): 4.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N

* CVE-2025-3415 ( SUSE ): 5.3

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Read the Full Advisory

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SUSE Releases Security Fix for Grafana Vulnerabilities in Multi-Linux Manager SUSE has issued an important update for Multi-Linux Manager addressing multiple security vulnerabilities in Grafana, specifically from version 11.5.7 to 11.5.10. The update resolves issues including excessive memory consumption, a sensitive information leak in logs, and other security concerns identified by CVEs such as CVE-2025-64751 and CVE-2025-47911. 3 sources 22

Extracted Entities

Companies (1)

Grafana

CVEs (7)

CVE-2025-11065 CVE-2025-3415 CVE-2025-47911 CVE-2025-58190 CVE-2025-6023 CVE-2025-6197 CVE-2025-64751