OPENSUSE-SU-2025:15244-1 libtpms-devel-0.10.1-1.1 on GA media

These are all security issues fixed in the libtpms-devel-0.10.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15255-1 ovmf-202505-2.1 on GA media

These are all security issues fixed in the ovmf-202505-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15306-1 valkey-8.1.2-1.1 on GA media

These are all security issues fixed in the valkey-8.1.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15208-1 apache-commons-fileupload-1.6.0-1.1 on GA media

These are all security issues fixed in the apache-commons-fileupload-1.6.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15305-1 traefik2-2.11.26-1.1 on GA media

These are all security issues fixed in the traefik2-2.11.26-1.1 package on the GA media of openSUSE Tumbleweed...

AlmaLinux 9 : thunderbird (ALSA-2025:8607)

The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2025:8607 advisory. firefox: thunderbird: Out-of-bounds access when resolving Promise objects CVE-2025-4918 firefox: thunderbird: Out-of-bounds access when optimizing linear...

OPENSUSE-SU-2025:15238-1 libetebase-devel-0.5.8-1.1 on GA media

These are all security issues fixed in the libetebase-devel-0.5.8-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15219-1 gdm-48.0-10.1 on GA media

These are all security issues fixed in the gdm-48.0-10.1 package on the GA media of openSUSE Tumbleweed...

AlmaLinux 9 : xorg-x11-server-Xwayland (ALSA-2025:7165)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:7165 advisory. xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability CVE-2024-9632 X.Org: Xwayland: Use-after-free of the root cursor...

AlmaLinux 9 : rsync (ALSA-2025:7050)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:7050 advisory. rsync: Path traversal vulnerability in rsync CVE-2024-12087 rsync: --safe-links option bypass leads to path traversal CVE-2024-12088 rsync: Race Condition...

GHSA-3V48-283X-F2W4 vulnerabilities

Vulnerabilities for packages: filebrowser...

CGA-VP5Q-G93R-42XP

Bulletin has no description...

GHSA-3M86-C9X3-VWM9

creationtimestamp| type| source ---|---|--- 2025-07-02 14:54:26+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114784211147922979...

CVE-2025-53493

CVE-2025-53493 affects MediaWiki MintyDocs Extension (versions 1.39.X–1.43.1) with Stored XSS due to improper neutralization of input during web page generation. The issue is fixed in 1.43.2; stakeholders should upgrade MintyDocs to 1.43.2 or later. Other connected sources (PT-2025-27640, Red Hat...

CVE-2025-53415

Delta Electronics DTM Soft Project File Parsing Deserialization of Untrusted Data Remote Code Execution...

Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation 24.0.1-IF004 (June 2025)

Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Cloud Pak for Business Automation 24.0.1-IF004. Vulnerability Details CVEID:CVE-2025-29907 DESCRIPTION: jsPDF is a library to generate PDFs in JavaScript. Prior to...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-140.0esr-i686-1slack15.0.txz: Upgraded. This update contains security fixes and improvements, and mov...

Ubuntu 24.04 LTS / 24.10 : Linux kernel vulnerabilities (USN-7610-1)

The remote Ubuntu 24.04 LTS / 24.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7610-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects...

Mozilla Thunderbird < 128.12

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 128.12. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-55 advisory. - The executable file warning did not warn users before opening files with the terminal extension. This b...

AlmaLinux 9 : python3.9 (ALSA-2025:10136)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:10136 advisory. cpython: Tarfile extracts filtered members when errorlevel=0 CVE-2025-4435 cpython: Bypass extraction filter to modify file metadata outside extraction...