[SECURITY] [DSA 5906-1] erlang security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5906-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 20, 2025 https://www.debian.org/security/faq -...

CVE-2025-22107

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105tabledeleteentry There are actually 2 problems: - deleting the last element doesn't require the memmove of elements i + 1, end over it. Actually, element i+1 is out of...

SUSE: Security Advisory (SUSE-SU-2025:1325-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-47669

In the provided materials, CVE-2021-47669 is tied to the Linux kernel, specifically a use-after-free condition in the vxcan_xmit path of can: vxcan. After calling netif_rx_ni(skb), the code may dereference skb, and the canfd_frame cfd that aliases skb memory can be accessed post-netif_rx_ni, lead...

CVE-2025-23137

In the Linux kernel, the following vulnerability has been resolved: cpufreq/amd-pstate: Add missing NULL ptr check in amdpstateupdate Check if policy is NULL before dereferencing it in amdpstateupdate...

CVE-2025-30215 vulnerabilities

Vulnerabilities for packages: telegraf, nats-top, prometheus-nats-exporter, nats-server, nats-server-fips, nats-top-fips...

SUSE-SU-2025:1325-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: - Update to version 2.48.1 - CVE-2024-54551: improper memory handling may lead to a denial-of-service when processing certain web content bsc1240962 - CVE-2025-24208: permissions issue may lead to a cross-site scripting attack when loading a...

Oracle MySQL Server <= 8.0.41, 8.1 <= 8.4.4, 9.0 <= 9.2.0 Security Update (cpuapr2025)- Windows

Oracle MySQL Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; if...

SUSE: Security Advisory (SUSE-SU-2025:1263-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-30728

...

CVE-2025-32395 vulnerabilities

Vulnerabilities for packages: langfuse, langfuse-fips...

CVE-2025-24358 vulnerabilities

Vulnerabilities for packages: tailscale, harbor...

CVE-2025-24358 vulnerabilities

Vulnerabilities for packages: zitadel, harbor-fips, tailscale, harbor...

CVE-2025-1979 vulnerabilities

Vulnerabilities for packages: py3.10-vllm-cuda-12.6...

rekor-1.3.10-1.1 on GA media (moderate)

rekor-1.3.10-1.1 on GA media Announcement ID: openSUSE-SU-2025:14990-1 Rating: moderate Cross-References: CVE-2023-45288 CVE-2024-6104 CVE-2025-22868 CVE-2025-22869 CVE-2025-27144 CVE-2025-30204 CVSS scores: CVE-2023-45288 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2023-45288 SUS...

SUSE-SU-2025:1260-1 Security update for the Linux Kernel (Live Patch 44 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059161 fixes several issues. The following security issues were fixed: - CVE-2022-49014: net: tun: Fix use-after-free in tundetach bsc1232818. - CVE-2022-49563: crypto: qat - add param check for RSA bsc1238788. - CVE-2022-49564: crypto: qat - add param...

CVE-2025-32381 vulnerabilities

Vulnerabilities for packages: py3.10-vllm-cuda-11.8...

SUSE-SU-2025:1252-1 Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024111 fixes several issues. The following security issues were fixed: - CVE-2024-41090: tap: add missing verification for short frame bsc1228714. - CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6create bsc1235218...

CVE-2025-31130 vulnerabilities

Vulnerabilities for packages: helix, starship, cargo-c, cargo-audit...

Advisory ROSA-SA-2025-2808

Software: libreswan 4.12 OS: ROSA Virtualization 3.0 packageevrstring: libreswan-4.12-2.rv30.4 CVE-ID: CVE-2024-2357 BDU-ID: 2024-03242 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the VPN protocol library using "IPsec" libreswan is related to the use of the PreSharedKey secret to create an AUTH...