Monthly Patches are out for Samsung Android, MediaTek, Siemens, Schneider Electric, and SAP. Quarterly Patches are out for Splunk. New Alerts for Phoenix Contact, WAGO, and Linux.
Patches for Microsoft and Adobe are expected this afternoon. Patches for Palo Alto and Juniper are expected tomorrow.
An item of note, there were no security patches for Google Android or Pixel this month.
MediaTek
MediaTek Monthly Patches include 16 fixed vulnerabilities, 7 rated High and 9 rated Medium.
More info.
Samsung Android Monthly Patches include Samsung Semiconductor and 17 Samsung-specific SVEs.
More info.
Monthly Patches from Siemens include 9 new bulletins and 17 updated bulletins. Of the new bulletins, highest CVSSv4 score of 9.3
More info.
Siemens SINEC NMS is affected by multiple vulnerabilities which could allow an attacker to elevate privilege and exceute arbitrary code. Highest CVSSv4 score of 9.3
More info.
Schneider Electric Monthly Patches include 4 new bulletins and 6 updated bulletins. Of the new bulletins, highest CVSSv4 score of 9.5
More info.
Monthly Patches for SAP include 27 new Security Notes and 4 updated. Highest CVSSv3 score of 9.9
More info.
Splunk has published 12 security bulletins, 4 for Splunk and 8 for third-party software included in Splunk. Two are rated Critical, 1 rated High, 7 rated Medium, and 2 rated Low.
More info.
Phoenix Contact has published 4 bulletins for vulnerabilities in CHARX SEC-3xxx charging controllers and PLCnext Firmware. Highest CVSSv3 score of 9.8
More info.
WAGO Device Sphere has been updated to fix a vulnerability that installs identical certificates across all systems instead of unique ones, which are intended for JWT Token encryption and signing. A remote attacker may use default certificates to generate JWT Tokens and gain full access to the tool and all connected devices. CVSSv3 score of 10.
More info.
SUSE has updated the kernel. More info.
OpenSUSE has updated the kernel. More info.
Red Hat has updated the kernel-rt. More info.
Oracle Linux has updated the kernel. More info.
