CVE-2025-38502 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-38502 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-40035 affecting package kernel for versions less than 6.6.112.1-2

CVE-2025-40035 affecting package kernel for versions less than 6.6.112.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2025-39947 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39947 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-39916 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39916 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-39846 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39846 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-11414 affecting package binutils for versions less than 2.41-10

CVE-2025-11414 affecting package binutils for versions less than 2.41-10. A patched version of the package is available...

CVE-2025-39841 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39841 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-39842 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39842 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-39914 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39914 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-39923 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39923 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-40071 affecting package kernel for versions less than 6.6.112.1-2

CVE-2025-40071 affecting package kernel for versions less than 6.6.112.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2025-50181 affecting package python-pip for versions less than 24.2-5

CVE-2025-50181 affecting package python-pip for versions less than 24.2-5. A patched version of the package is available...

CVE-2025-41436

Mattermost versions 11.0 fail to properly enforce the "Allow users to view archived channels" setting which allows regular users to access archived channel content and files via the "Open in Channel" functionality from followed threads...

CVE-2025-55070 Lack of MFA enforcement in WebSocket connections

Mattermost versions 11 fail to enforce multi-factor authentication on WebSocket connections which allows unauthenticated users to access sensitive information via WebSocket events...

CVE-2025-41436 Unauthorized access to archived channel content via threads interface

Mattermost versions 11.0 fail to properly enforce the "Allow users to view archived channels" setting which allows regular users to access archived channel content and files via the "Open in Channel" functionality from followed threads...

CVE-2025-11776

Mattermost CVE-2025-11776 affects Mattermost Server versions earlier than 11.0.0. A flaw in access control on the archived channel search API (/api/v4/teams/{team_id}/channels/search_archived) allows guest users to discover archived public channels. Root cause: insufficient restrictions on archiv...

CVE-2025-11776 Guest user can discover archived public channels

Mattermost versions 11 fail to properly restrict access to archived channel search API which allows guest users to discover archived public channels via the /api/v4/teams/teamid/channels/searcharchived endpoint...

WordPress Select Core plugin < 2.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Select Core versions 2.6...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libssh (UTSA-2025-990914)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990914 advisory. A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the sshkdf function responsible for key derivation. Due to inconsiste...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libssh (UTSA-2025-990927)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990927 advisory. A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftphandle function due to an incorrect comparison...