Security Vulnerabilities fixed in Firefox 138.0.4 — Mozilla

An attacker was able to perform an out-of-bounds read or write on a JavaScript Promise object. An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes...

EulerOS Virtualization 2.12.0 : curl (EulerOS-SA-2025-1568)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server...

OPENSUSE-SU-2025:15099-1 python311-nltk-3.9.1-2.4 on GA media

These are all security issues fixed in the python311-nltk-3.9.1-2.4 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15127-1 ruby3.4-rubygem-sprockets-4.2.1-1.7 on GA media

These are all security issues fixed in the ruby3.4-rubygem-sprockets-4.2.1-1.7 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15101-1 python311-py7zr-0.20.8-2.6 on GA media

These are all security issues fixed in the python311-py7zr-0.20.8-2.6 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15098-1 python311-mechanize-0.4.10-1.4 on GA media

These are all security issues fixed in the python311-mechanize-0.4.10-1.4 package on the GA media of openSUSE Tumbleweed...

EulerOS Virtualization 2.12.0 : openssl (EulerOS-SA-2025-1565)

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: Use of the low-level GF2^m elliptic curve APIs with untrusted explicit values for the field polynomial can lead to...

OPENSUSE-SU-2025:15119-1 ruby3.4-rubygem-kramdown-2.4.0-1.15 on GA media

These are all security issues fixed in the ruby3.4-rubygem-kramdown-2.4.0-1.15 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15108-1 python311-waitress-3.0.2-1.4 on GA media

These are all security issues fixed in the python311-waitress-3.0.2-1.4 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15112-1 ruby3.4-rubygem-activerecord-7.0-7.0.8.6-1.3 on GA media

These are all security issues fixed in the ruby3.4-rubygem-activerecord-7.0-7.0.8.6-1.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15128-1 ruby3.4-rubygem-sprockets-3.7-3.7.5-1.3 on GA media

These are all security issues fixed in the ruby3.4-rubygem-sprockets-3.7-3.7.5-1.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15097-1 python311-loguru-0.7.2-2.5 on GA media

These are all security issues fixed in the python311-loguru-0.7.2-2.5 package on the GA media of openSUSE Tumbleweed...

EulerOS Virtualization 2.12.1 : openssl (EulerOS-SA-2025-1550)

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: Use of the low-level GF2^m elliptic curve APIs with untrusted explicit values for the field polynomial can lead to...

EulerOS Virtualization 2.12.1 : python-requests (EulerOS-SA-2025-1558)

According to the versions of the python-requests package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An unclaimed Amazon S3 bucket, 'codeconf', is referenced in an audio file link within the .rst documentation file. This...

EulerOS Virtualization 2.12.0 : python-requests (EulerOS-SA-2025-1574)

According to the versions of the python-requests package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An unclaimed Amazon S3 bucket, 'codeconf', is referenced in an audio file link within the .rst documentation file. This...

OPENSUSE-SU-2025:15102-1 python311-pycapnp-2.0.0-2.5 on GA media

These are all security issues fixed in the python311-pycapnp-2.0.0-2.5 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15096-1 python311-jwcrypto-1.5.6-2.5 on GA media

These are all security issues fixed in the python311-jwcrypto-1.5.6-2.5 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15129-1 ruby3.4-rubygem-web-console-4.2.1-1.7 on GA media

These are all security issues fixed in the ruby3.4-rubygem-web-console-4.2.1-1.7 package on the GA media of openSUSE Tumbleweed...

EulerOS Virtualization 2.12.0 : dhcp (EulerOS-SA-2025-1576)

According to the versions of the dhcp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname of any RTYPE can suffer fr...

Mozilla Firefox ESR < 128.10.1

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 128.10.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-37 advisory. - An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing...