CVE-2024-45615 affecting package opensc for versions less than 0.26.1-1

CVE-2024-45615 affecting package opensc for versions less than 0.26.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-45618 affecting package opensc for versions less than 0.26.1-1

CVE-2024-45618 affecting package opensc for versions less than 0.26.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-45616 affecting package opensc for versions less than 0.26.1-1

CVE-2024-45616 affecting package opensc for versions less than 0.26.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-45620 affecting package opensc for versions less than 0.26.1-1

CVE-2024-45620 affecting package opensc for versions less than 0.26.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-48623 affecting package perl-Cpanel-JSON-XS for versions less than 4.39-1

CVE-2022-48623 affecting package perl-Cpanel-JSON-XS for versions less than 4.39-1. An upgraded version of the package is available that resolves this issue...

Security update for curl

This update for curl fixes the following issues: Security issues fixed: CVE-2025-9086: bug in patch comparison logic when processing cookies can lead to out-of-bounds read in heap buffer bsc1249191. CVE-2025-10148: predictable websocket mask can lead to proxy cache poisoning by malicious server...

CVE-2025-10667: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in itsourcecode Online Discussion Forum 1.0. Affected by this issue is some unknown functionality of the file /members/composemsg.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been...

DLA-4303-1 nextcloud-desktop - security update

Bulletin has no description...

openSUSE Security Advisory (SUSE-SU-2025:03234-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2025:03237-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian dla-4304 : libcjson-dev - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4304 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4304-1 [email protected] https://www.debian.org/lts/security/...

AZL-71900 CVE-2023-53347 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Handle pairing of E-switch via uplink un/load APIs In case user switch a device from switchdev mode to legacy mode, mlx5 first unpair the E-switch and afterwards unload the uplink vport. From the other hand, in case use...

CVE-2025-9078

Mattermost versions 10.8.x = 10.8.3, 10.5.x = 10.5.8, 9.11.x = 9.11.17, 10.10.x = 10.10.1, 10.9.x = 10.9.3 fail to properly validate cache keys for link metadata which allows authenticated users to access unauthorized posts and poison link previews via hash collision attacks on FNV-1 hashing...

Ubuntu 24.04 LTS : libyang vulnerabilities (USN-7752-1)

The remote Ubuntu 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7752-1 advisory. It was discovered that libyang incorrectly handled certain memory operations when parsing YANG strings. An attacker could possibly use this issue to caus...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 : xmltodict vulnerability (USN-7753-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 host has packages installed that are affected by a vulnerability as referenced in the USN-7753-1 advisory. Camilo Vera discovered that xmltodict parsed maliciously crafted XML input, contrary to expectations. An...

AZL-67413 CVE-2025-39812 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved: sctp: initialize more fields in sctpv6fromsk syzbot found that sin6scopeid was not properly initialized, leading to undefined behavior. Clear sin6scopeid and sin6flowinfo. BUG: KMSAN: uninit-value in sctpv6cmpaddr+0x887/0x8c0...

AZL-74700 CVE-2025-39806 affecting package kernel for versions less than 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: fix slab out-of-bounds access in mtreportfixup A malicious HID device can trigger a slab out-of-bounds during mtreportfixup by passing in report descriptor smaller than 607 bytes. mtreportfixup attempts to patch...

DLA-4302-1 node-sha.js - security update

Bulletin has no description...

Important: ImageMagick

Issue Overview: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-1, ImageMagick is vulnerable to heap-buffer overflow read around the handling of images with separate alpha channels when performing image magnification in...

Ubuntu: Security Advisory (USN-7740-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...