CVE-2025-39876 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39876 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-39864 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39864 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-39947 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39947 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-39937 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39937 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-39916 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39916 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-39842 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39842 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-39914 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39914 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-39846 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39846 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-39923 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39923 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-39848 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39848 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

HSEC-2023-0002 Improper Verification of Cryptographic Signature

Improper Verification of Cryptographic Signature The Biscuit specification version 1 contains a vulnerable algorithm that allows malicious actors to forge valid Γ-signatures. Such an attack would allow an attacker to create a token with any access level. The version 2 of the specification mandate...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the /api/v4/teams/teamid/channels/searcharchived endpoint. An attacker can access information about archived public channels by sending crafted requests as a guest user. Remediation Upgrade...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the /api/v4/teams/teamid/channels/searcharchived endpoint. An attacker can access information about archived public channels by sending crafted requests as a guest user. Remediation Upgrade...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the /api/v4/teams/teamid/channels/searcharchived endpoint. An attacker can access information about archived public channels by sending crafted requests as a guest user. Remediation Upgrade...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function due to the lack of multi-factor authentication enforcement in WebSocket connections. An attacker can gain unauthorized access to sensitive information by establishing a WebSocket connection...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization due to improper enforcement of the Allow users to view archived channels setting in the threads interface. An attacker can gain unauthorized access to archived channel content and files by using the "Open in...

Incorrect Authorization

Overview github.com/mattermost/mattermost/server/channels/app is a private-cloud Slack alternative Affected versions of this package are vulnerable to Incorrect Authorization due to improper enforcement of the Allow users to view archived channels setting in the threads interface. An attacker can...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization due to improper enforcement of the Allow users to view archived channels setting in the threads interface. An attacker can gain unauthorized access to archived channel content and files by using the "Open in...

[SECURITY] Fedora 43 Update: runc-1.3.3-1.fc43

The runc command can be used to start containers which are packaged in accordance with the Open Container Initiative's specifications, and to manage containers running under runc...

AZL-70202 CVE-2025-12818 affecting package postgresql for versions less than 14.20-1

Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes. This results in a segmentation fault for the application using libpq. Versions...