6804 matches found
OPENSUSE-SU-2025:15734-1 starboard-0.15.28-1.1 on GA media
These are all security issues fixed in the starboard-0.15.28-1.1 package on the GA media of openSUSE Tumbleweed...
helm-3.19.1-1.1 on GA media (moderate)
helm-3.19.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:15730-1 Rating: moderate Cross-References: CVE-2025-47911 CVE-2025-58190 CVSS scores: CVE-2025-47911 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2025-47911 SUSE : 6.9...
weblate-5.14.3-1.1 on GA media (moderate)
weblate-5.14.3-1.1 on GA media Announcement ID: openSUSE-SU-2025:15733-1 Rating: moderate Cross-References: CVE-2025-64326 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the weblate-5.14.3-1....
CVE-2025-40122 perf/x86/intel: Fix IA32_PMC_x_CFG_B MSRs access error
In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix IA32PMCxCFGB MSRs access error When running perffuzzer on PTL, sometimes the below "unchecked MSR access error" is seen when accessing IA32PMCxCFGB MSRs. 55.611268 unchecked MSR access error: WRMSR to 0x1986...
CVE-2025-40155: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: debugfs: Fix legacy mode page table dump logic In legacy mode, SSPTPTR is ignored if TT is not 00b or 01b. SSPTPTR maybe uninitialized or zero in that case and may cause oops like: Oops: general protection fault,...
OPENSUSE-SU-2025:15729-1 go-sendxmpp-0.15.1-1.1 on GA media
These are all security issues fixed in the go-sendxmpp-0.15.1-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2025-40172: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Treat remaining == 0 as error in findandmapuserpages Currently, if findandmapuserpages takes a DMA xfer request from the user with a length field set to 0, or in a rare case, the host receives QAICTRANSDMAXFERCONT fro...
CVE-2025-40138: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid NULL pointer dereference in f2fscheckquotaconsistency syzbot reported a f2fs bug as below: Oops: gen 107.736417 T5848 Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 ...
EUVD-2025-98677
Malicious code in generalcranez3n npm...
EUVD-2025-105089
Malicious code in generalfrogz3n npm...
EUVD-2025-105088
Malicious code in generalpenguinz3n npm...
EUVD-2025-91721
Malicious code in generalbeetlez3n npm...
EUVD-2025-74616
Malicious code in generalaardwolfamethyst-75 npm...
EUVD-2025-79166
Malicious code in generalgiraffez3n npm...
EUVD-2025-81818
Malicious code in generalaphiddumbs npm...
EUVD-2025-63894
Malicious code in generallemmingz3n npm...
EUVD-2025-63893
Malicious code in generalminkz3n npm...
Malicious code in general_thrush_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7a26933f84505aba0dcfc7796bdc55ea1d8b3f85003c21069060ff6ee11763 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...