Ubuntu 25.10 : jaraco.context vulnerability (USN-7979-1)

The remote Ubuntu 25.10 host has a package installed that is affected by a vulnerability as referenced in the USN-7979-1 advisory. It was discovered that jaraco.context incorrectly handled certain zip file paths. An attacker could possibly use this issue to extract arbitrary files outside of the...

DSA-6116-1 chromium - security update

Bulletin has no description...

CVE-2025-61726 affecting package golang for versions less than 1.25.6-1

CVE-2025-61726 affecting package golang for versions less than 1.25.6-1. A patched version of the package is available...

CVE-2025-68119 affecting package golang for versions less than 1.25.6-1

CVE-2025-68119 affecting package golang for versions less than 1.25.6-1. A patched version of the package is available...

CVE-2025-68119 affecting package golang for versions less than 1.24.12-1

CVE-2025-68119 affecting package golang for versions less than 1.24.12-1. A patched version of the package is available...

CVE-2025-61728 affecting package golang for versions less than 1.25.6-1

CVE-2025-61728 affecting package golang for versions less than 1.25.6-1. A patched version of the package is available...

CVE-2025-61726 affecting package golang for versions less than 1.24.12-1

CVE-2025-61726 affecting package golang for versions less than 1.24.12-1. A patched version of the package is available...

CVE-2025-61728 affecting package golang for versions less than 1.25.6-1

CVE-2025-61728 affecting package golang for versions less than 1.25.6-1. A patched version of the package is available...

CVE-2025-68121 affecting package golang for versions less than 1.25.6-1

CVE-2025-68121 affecting package golang for versions less than 1.25.6-1. A patched version of the package is available...

CVE-2025-61730 affecting package golang for versions less than 1.25.6-1

CVE-2025-61730 affecting package golang for versions less than 1.25.6-1. A patched version of the package is available...

CVE-2025-61728 affecting package golang for versions less than 1.24.12-1

CVE-2025-61728 affecting package golang for versions less than 1.24.12-1. A patched version of the package is available...

CVE-2025-68119 affecting package golang for versions less than 1.25.6-1

CVE-2025-68119 affecting package golang for versions less than 1.25.6-1. A patched version of the package is available...

GCVE-1-2026-0009

creationtimestamp| type| source ---|---|--- 2026-01-29 14:42:24+00:00| seen| https://vulnerability.circl.lu/bundle/822f8677-7cc7-44e9-8414-329e2be8aaf1...

GCVE-1-2026-0011

creationtimestamp| type| source ---|---|--- 2026-01-29 14:42:24+00:00| seen| https://vulnerability.circl.lu/bundle/822f8677-7cc7-44e9-8414-329e2be8aaf1...

GCVE-1-2026-0010

creationtimestamp| type| source ---|---|--- 2026-01-29 14:42:24+00:00| seen| https://vulnerability.circl.lu/bundle/822f8677-7cc7-44e9-8414-329e2be8aaf1...

TencentOS Server 4: python-pyasn1 (TSSA-2026:0038)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0038 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

📄 OpenSSL 3.x ASN.1 AES‑GCM Nonce Stack Corruption

This Metasploit auxiliary module generates a specially crafted CMS file encoded in DER format to test a stack-based buffer overflow vulnerability in OpenSSL's ASN.1 parser related to improper handling of oversized AES-GCM nonce IV values within AES-GCM-Parameters as defined in RFC 5084. The...

AZL-75731 CVE-2025-61730 affecting package golang for versions less than 1.25.6-1

During the TLS 1.3 handshake if multiple messages are sent in records that span encryption level boundaries for instance the Client Hello and Encrypted Extensions messages, the subsequent messages may be processed before the encryption level changes. This can cause some minor information disclosu...

AZL-78933 CVE-2025-61730 affecting package golang 1.25.7-1

During the TLS 1.3 handshake if multiple messages are sent in records that span encryption level boundaries for instance the Client Hello and Encrypted Extensions messages, the subsequent messages may be processed before the encryption level changes. This can cause some minor information disclosu...

AZL-75648 CVE-2025-61730 affecting package msft-golang for versions less than 1.24.12-1

During the TLS 1.3 handshake if multiple messages are sent in records that span encryption level boundaries for instance the Client Hello and Encrypted Extensions messages, the subsequent messages may be processed before the encryption level changes. This can cause some minor information disclosu...