CVE-2025-14180 affecting package php for versions less than 8.3.29-1

CVE-2025-14180 affecting package php for versions less than 8.3.29-1. A patched version of the package is available...

CVE-2025-14178 affecting package php for versions less than 8.3.29-1

CVE-2025-14178 affecting package php for versions less than 8.3.29-1. A patched version of the package is available...

CVE-2025-68615 affecting package net-snmp for versions less than 5.9.5.2-1

CVE-2025-68615 affecting package net-snmp for versions less than 5.9.5.2-1. An upgraded version of the package is available that resolves this issue...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection when operating in Restricted Mode, which is enabled for untrusted workspaces. Remediation Upgrade github.com/golang/vscode-go/extension to version 0.52.0-rc.1 or higher. References - GitHub ChangeLog - GitHub...

DLA-4426-1 osslsigncode - security update

Bulletin has no description...

CVE-2025-12819 affecting package pgbouncer for versions less than 1.25.1-1

CVE-2025-12819 affecting package pgbouncer for versions less than 1.25.1-1. An upgraded version of the package is available that resolves this issue...

DLA-4425-1 python-django - security update

Bulletin has no description...

Debian: Security Advisory (DLA-4423-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DLA-4424-1 openjpeg2 - security update

Bulletin has no description...

DLA-4423-1 kodi - security update

Bulletin has no description...

AZL-73192 CVE-2025-68972 affecting package gnupg2 for versions less than 2.4.9-1

In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modified message that places additional text after the signed material, such that signature verification of the modified message succeeds although an "invalid armor" message is printed...

[SECURITY] Fedora 43 Update: docker-buildkit-0.26.3-1.fc43

Concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit...

DLA-4420-1 postgresql-13 - security update

Bulletin has no description...

SUSE: Security Advisory (SUSE-SU-2025:4515-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2025:21233-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-13713

Tencent Hunyuan3D-1 loadpretrained Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent Hunyuan3D-1. User interaction is required to exploit this vulnerability in that the...

AZL-73159 CVE-2025-68724 affecting package kernel for versions less than 6.6.121.1-1

In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetrickeys - prevent overflow in asymmetrickeygenerateid Use checkaddoverflow to guard against potential integer overflows when adding the binary blob lengths and the size of an asymmetrickeyid structure and return...

AZL-73162 CVE-2025-68374 affecting package kernel 6.6.126.1-1

In the Linux kernel, the following vulnerability has been resolved: md: fix rcu protection in mdwakeupthread We attempted to use RCU to protect the pointer 'thread', but directly passed the value when calling mdwakeupthread. This means that the RCU pointer has been acquired before rcureadlock,...

EUVD-2025-204978

Tencent Hunyuan3D-1 loadpretrained Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent Hunyuan3D-1. User interaction is required to exploit this vulnerability in that the...

SUSE: Security Advisory (SUSE-SU-2025:4506-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...