[SECURITY] [DLA 4191-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4191-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort May 29, 2025 https://wiki.debian.org/LTS -...

GHSA-C82M-4WJJ-W8FW vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-HQJF-GJ2Q-64CH vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-C82M-4WJJ-W8FW vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2025-3704

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DBAR Productions Volunteer Sign Up Sheets pta-volunteer-sign-up-sheets allows Stored XSS.This issue affects Volunteer Sign Up Sheets: from n/a through 5.5.5...

CISA Releases Five Industrial Control Systems Advisories

CISA released five Industrial Control Systems ICS advisories on May 29, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-148-01 Siemens SiPass ICSA-25-148-02 Siemens SiPass Integrated ICSA-25-148-03 Consilium...

LSN-0112-1 Kernel Live Patch Security Notice

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix use-after-free due to delegation race A delegation break could arrive as soon as we've called vfssetlease. A delegation break runs a callback which immediately in nfsd4cbrecallprepare adds the delegation to delrecalllru...

MINI-2Q7H-H855-V268

Bulletin has no description...

MINI-QG9W-FHW8-2M4R

Bulletin has no description...

MINI-G5J5-JVQ6-H5V6

Bulletin has no description...

MINI-9QXV-699Q-R43C

Bulletin has no description...

MINI-48HR-5J6M-J9V8

Bulletin has no description...

Aim 安全漏洞

Aim is an easy-to-use and high-performance open source experiment tracker from Aim Open Source USA. Aim 3.29.1 and earlier versions have a security vulnerability that stems from improper handling of the Query parameter in the runview Object Handler component, which could lead to sandboxing issues...

openSUSE Security Advisory (SUSE-SU-2025:01713-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux 2 : firefox, --advisory ALAS2FIREFOX-2025-038 (ALASFIREFOX-2025-038)

The version of firefox installed on the remote host is prior to 128.10.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2FIREFOX-2025-038 advisory. An issue in sqlite v.3.49.0 allows an attacker to cause a denial of service via the SQLITEDBCONFIGLOOKASIDE...

Amazon Linux 2 : mariadb (ALASMARIADB10.5-2025-007)

The version of mariadb installed on the remote host is prior to 10.5.29-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2MARIADB10.5-2025-007 advisory. MariaDB Server 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., and 11.0 through 11.0. can sometim...

Amazon Linux 2 : nerdctl (ALAS-2025-2863)

The version of nerdctl installed on the remote host is prior to 2.0.5-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2863 advisory. The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a...

Medium: libxml2

Issue Overview: In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API Python bindings because of an incorrect return value. This occurs in xmlPythonFileRead and xmlPythonFileReadRaw because of a difference between bytes and characters...

AlmaLinux 8 : firefox (ALSA-2025:8308)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2025:8308 advisory. firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details CVE-2025-5267 firefox: thunderbird: Potential local...

RHEL 8 : mingw-freetype and spice-client-win (RHSA-2025:8292)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:8292 advisory. MinGW Windows Freetype library. Security Fixes: freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX...