SUSE CVE-2024-45781

A flaw was found in grub2. When reading a symbolic link's name from a UFS filesystem, grub2 fails to validate the string length taken as an input. The lack of validation may lead to a heap out-of-bounds write, causing data integrity issues and eventually allowing an attacker to circumvent secure...

DeepSeek found to be sharing user data with TikTok parent company ByteDance

A couple of weeks ago we reported on the concerns surrounding data collection and security at DeepSeek, the Chinese AI company which recently made headlines for shaking up the industry after seemingly appearing from nowhere to become top of the app download charts. Now South Korea’s Personal...

DNS-over-HTTPS implementation suffers from multiple issues under heavy query load

...

Slackware: Security Advisory (SSA:2025-050-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 Security Update : grub2 (SUSE-SU-2025:0587-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0587-1 advisory. - CVE-2024-45781: Fixed strcpy overflow in ufs. bsc1233617 - CVE-2024-56737: Fixed a heap-based buffer overflow in hfs. bsc1234958 ...

OPENSUSE-SU-2025:14825-1 luanti-5.11.0-1.1 on GA media

These are all security issues fixed in the luanti-5.11.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14824-1 java-23-openjdk-23.0.2.0-1.1 on GA media

These are all security issues fixed in the java-23-openjdk-23.0.2.0-1.1 package on the GA media of openSUSE Tumbleweed...

ALSA-2025:1739 Important: postgresql:15 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation CVE-2025-1094 For more details about the security issues, including the impact, a CVSS score,...

OPENSUSE-SU-2025:14827-1 proftpd-1.3.8c-2.1 on GA media

These are all security issues fixed in the proftpd-1.3.8c-2.1 package on the GA media of openSUSE Tumbleweed...

Important: postgresql:16 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation CVE-2025-1094 For more details about the security issues, including the impact, a CVSS score,...

Fedora 40 : kernel (2025-b268fceaec)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-b268fceaec advisory. The 6.12.15 stable kernel update contains a number of important fixes across the tree. ---- The 6.12.14 stable kernel update contains a number of...

Moodle Multiple Vulnerabilities (Feb 2025)

Moodle is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:moodle:moodle"; ifdescription...

Netscaler VPX : NTP_Sync Failing even after ntp process restart

Netscaler VPX is configured with NTP sync to pool.ntp.org or any NTP server, but the NTP sync does not work even after disabling and enabling NTP sync and also restarting the NTP process...

OPENSUSE-SU-2025:14823-1 dcmtk-3.6.9-2.1 on GA media

These are all security issues fixed in the dcmtk-3.6.9-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14828-1 radare2-5.9.8-2.1 on GA media

These are all security issues fixed in the radare2-5.9.8-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14826-1 libmariadbd-devel-11.7.2-1.1 on GA media

These are all security issues fixed in the libmariadbd-devel-11.7.2-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-37363 Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action. CWE-862 Hitachi Vantara Pentaho Business Analytics Server versions before 10.2.0.0 and 9.3.0.8, including 8.3.x, do not correctly perform an authorization check in the data source...

CVE-2024-37363 Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action. CWE-862 Hitachi Vantara Pentaho Business Analytics Server versions before 10.2.0.0 and 9.3.0.8, including 8.3.x, do not correctly perform an authorization check in the data source...

CVE-2024-5705 Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions. CWE-863 Hitachi Vantara Pentaho Business Analytics Server versions before...

[slackware-security] libxml2

New libxml2 packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libxml2-2.11.9-i586-2slack15.0.txz: Rebuilt. This update fixes security issues: Fix stack-buffer-overflow in xmlSnprintfElements. Fix...