OPENSUSE-SU-2025:15138-1 postgresql14-14.18-1.1 on GA media

These are all security issues fixed in the postgresql14-14.18-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15140-1 postgresql16-16.9-1.1 on GA media

These are all security issues fixed in the postgresql16-16.9-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15135-1 govulncheck-vulndb-0.0.20250515T200012-1.1 on GA media

These are all security issues fixed in the govulncheck-vulndb-0.0.20250515T200012-1.1 package on the GA media of openSUSE Tumbleweed...

Ubuntu 24.04 LTS : Linux kernel (Azure, N-Series) vulnerabilities (USN-7522-1)

"The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7522-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws i...

Ubuntu 24.04 LTS : Linux kernel (Raspberry Pi Real-time) vulnerabilities (USN-7523-1)

"The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7523-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws i...

When Elastic layers are assigned to VDAs they may fail to attach if VDA's are launched from shutdown

Elastic layers intermittently fail to attach during session launch. Layers are assigned to VDAs not users Ulayersvc logs show the different group membership is determined during each launch Working: ActiveDirectoryInfoService: Machine Group SIDs: test\Domain Computers, test\group1, test\group2...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not disabling IOCC for non-coherent DMA, which could lead to caching issues...

OPENSUSE-SU-2025:15131-1 MozillaThunderbird-128.10.1-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-128.10.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15136-1 grype-0.92.1-1.1 on GA media

These are all security issues fixed in the grype-0.92.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15137-1 postgresql13-13.21-1.1 on GA media

These are all security issues fixed in the postgresql13-13.21-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15141-1 python314-3.14.0~b1-3.1 on GA media

These are all security issues fixed in the python314-3.14.0b1-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15139-1 postgresql15-15.13-1.1 on GA media

These are all security issues fixed in the postgresql15-15.13-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15142-1 xen-4.20.0_12-1.1 on GA media

These are all security issues fixed in the xen-4.20.012-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15134-1 gnuplot-6.0.2-3.1 on GA media

These are all security issues fixed in the gnuplot-6.0.2-3.1 package on the GA media of openSUSE Tumbleweed...

TYPO3 9.0.0 < 9.5.51 ELTS / 10.0.0 < 10.4.50 ELTS / 11.0.0 < 11.5.44 ELTS / 12.0.0 < 12.4.31 / 13.0.0 < 13.4.12 (TYPO3-CORE-SA-2025-011)

The version of TYPO3 installed on the remote host is 9.0.0 prior to 9.5.51 ELTS / 10.0.0 prior to 10.4.50 ELTS / 11.0.0 prior to 11.5.44 ELTS / 12.0.0 prior to 12.4.31 / 13.0.0 prior to 13.4.12. It is, therefore, affected by a vulnerability as referenced in the TYPO3-CORE-SA-2025-011 advisory. -...

CVE-2025-39354 WordPress Grand Conference theme <= 5.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Conference allows Object Injection.This issue affects Grand Conference: from n/a through 5.2...

SUSE-SU-2025:1582-1 Security update for brltty

This update for brltty fixes the following issues: - Avoid having brlapi.key temporarily world-readable during creation bsc1235438...

WordPress The GDPR Framework By Data443 plugin < 2.2.0 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin GDPR Framework By Data443 versions 2.2.0...

CVE-2024-55063

Multiple Code Injection vulnerabilities in EasyVirt DC NetScope = 8.7.0 allows remote authenticated attackers to execute arbitrary code via the 1 lang parameter to /international/keyboard/options; the 2 keyboardlayout or 3 keyboardvariant parameter to /international/settings/keyboard; the 4...

Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkitgtk: A malicious website may exfiltrate data cross-origin CVE-2025-31205 webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash CVE-2025-31257 For mor...