SUSE-SU-2025:0246-1 Security update for the Linux Kernel (Live Patch 48 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059174 fixes several issues. The following security issues were fixed: - CVE-2024-36971: Fixed dstnegativeadvice race bsc1226324. - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk-trans bsc1233712. - CVE-2022-48956...

KLA79352 DoS vulnerabilities in Microsoft Browser

Denial of service vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service. Original advisories CVE-2025-0611 CVE-2025-0612 Related products Microsoft-Edge CVE list CVE-2025-0611 unknown CVE-2025-0612 unknown Solution Install...

About the security content of iOS 18.3 and iPadOS 18.3

About the security content of iOS 18.3 and iPadOS 18.3 This document describes the security content of iOS 18.3 and iPadOS 18.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

About the security content of macOS Sonoma 14.7.3

About the security content of macOS Sonoma 14.7.3 This document describes the security content of macOS Sonoma 14.7.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...

ruby3.4-rubygem-nokogiri-1.18.2-1.1 on GA media (moderate)

ruby3.4-rubygem-nokogiri-1.18.2-1.1 on GA media Announcement ID: openSUSE-SU-2025:14697-1 Rating: moderate Cross-References: CVE-2013-2877 CVE-2014-0191 CVE-2015-1819 CVE-2015-5312 CVE-2015-7497 CVE-2015-7498 CVE-2015-7499 CVE-2015-7500 CVE-2015-7941 CVE-2015-7942 CVE-2015-7995 CVE-2015-8035...

SUSE-SU-2025:0237-1 Security update for nodejs20

This update for nodejs20 fixes the following issues: Update to 20.18.2: - CVE-2025-23083: Fixed worker permission bypass via InternalWorker leak in diagnostics bsc1236251 - CVE-2025-23085: Fixed HTTP2 memory leak on premature close and ERRPROTO bsc1236250 - CVE-2025-22150: Fixed insufficiently...

SUSE-SU-2025:0236-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-48742: rtnetlink: make sure to refresh masterdev/mops in rtnlnewlink bsc1226694. - CVE-2022-49033: btrfs: qgroup: fix sleep from invalid context bug in...

SUSE-SU-2025:0230-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49035: media: s5pcec: limit msg.len to CECMAXMSGSIZE bsc1215304. - CVE-2024-53146: NFSD: Prevent a potential integer overflow bsc1234853. - CVE-2024-5315...

SUSE-SU-2025:0229-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver bsc1203332. - CVE-2022-48742: rtnetlink: make sure to refresh masterdev/mop...

Debian dsa-5848 : chromium - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5848 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5848-1 [email protected] https://www.debian.org/securit...

Mageia: Security Advisory (MGASA-2025-0020)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-0611 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2025-0612 vulnerabilities

Vulnerabilities for packages: chromium...

MGASA-2025-0020 Updated chromium-browser-stable packages fix security vulnerabilities

Lot of CVEs were fixed by upstream since our current version; please see the links...

CVE-2025-23047 vulnerabilities

Vulnerabilities for packages: hubble, hubble-ui...

CVE-2025-23047 vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, hubble, cilium-fips, cilium, hubble-ui, hubble-fips...

CVE-2023-37777

creationtimestamp| type| source ---|---|--- 2025-01-22 16:01:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2560 2025-01-22 16:15:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdrbl7d472b 2025-01-22 16:44:49+00:00| seen|...

CVE-2025-23932

creationtimestamp| type| source ---|---|--- 2025-01-22 15:21:31+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdoa7f5rv2e 2025-01-22 15:49:20+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113872795038569157 2025-01-22 15:49:48+00:00| seen|...

CVE-2025-0395 vulnerabilities

Vulnerabilities for packages: glibc...

Important: Red Hat Security Advisory: redis:6 security update

An update for the redis:6 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...