Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues The following security issues were fixed: CVE-2022-50327: ACPI: processor: idle: Check acpifetchacpidev return value bsc1249859. CVE-2022-50334: hugetlbfs: fix null-ptr-deref in hugetlbfsparseparam bsc1249857...

SUSE-SU-2025:4149-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50327: ACPI: processor: idle: Check acpifetchacpidev return value bsc1249859. - CVE-2022-50334: hugetlbfs: fix null-ptr-deref in hugetlbfsparseparam bsc124985...

TencentOS Server 4: python3.12 (TSSA-2025:0530)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0530 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

The vulnerability of the decode_win_permissions() function in the Wazuh intrusion detection and prevention system allows a perpetrator to execute arbitrary code.

The vulnerability of the decodewinpermissions function in the Wazuh intrusion detection and prevention system is related to a violation of the buffer’s initial boundary. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...

CVE-2025-64765 Astro middleware authentication checks based on url.pathname can be bypassed via url encoded values

Astro is a web framework. Prior to version 5.15.8, a mismatch exists between how Astro normalizes request paths for routing/rendering and how the application’s middleware reads the path for validation checks. Astro internally applies decodeURI to determine which route to render, while the...

Mozilla Thunderbird < 52.1

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 52.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2017-13 advisory. - Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex...

SUSE-SU-2025:4111-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50327: ACPI: processor: idle: Check acpifetchacpidev return value bsc1249859. - CVE-2022-50334: hugetlbfs: fix null-ptr-deref in hugetlbfsparseparam bsc1249857. ...

OSV-2025-900 Heap-buffer-overflow in DecodeFrame

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=460575093 Crash type: Heap-buffer-overflow READ Crash state: DecodeFrame testdecoderprocess EsOutSend...

EUVD-2025-176946

Malicious code in proxy-rain-decode-xi-error npm...

EUVD-2025-179251

Malicious code in double-decode-encrypt-cache-bundle npm...

EUVD-2025-179381

Malicious code in decode-info-new-finally-new npm...

EUVD-2025-180123

Malicious code in bash-serialize-decode-grid-sudo npm...

EUVD-2025-175752

Malicious code in user-boolean-info-decode-try npm...

EUVD-2025-177886

Malicious code in meta-boolean-analyze-decode-cloud npm...

EUVD-2025-178288

Malicious code in java-socket-cluster-decode-catch npm...

EUVD-2025-177475

Malicious code in old-import-decode-table-process npm...

EUVD-2025-176832

Malicious code in quick-decode-transpile-array-wind npm...

EUVD-2025-176082

Malicious code in table-old-sun-await-decode npm...

EUVD-2025-177751

Malicious code in mu-dog-proxy-decode-unix npm...

Malicious code in quick-decode-transpile-array-wind (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 789be1eb5319667c7103faae653520c2ac40f78ca9957e497f34f7395845b3d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...