OPENSUSE-SU-2025:14818-1 kubernetes1.31-apiserver-1.31.6-1.1 on GA media

These are all security issues fixed in the kubernetes1.31-apiserver-1.31.6-1.1 package on the GA media of openSUSE Tumbleweed...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS : Symfony vulnerabilities (USN-7272-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7272-1 advisory. Soner Sayakci discovered that Symfony incorrectly handled cookie storage in the web cache. An attacker could possibly use this...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Atril vulnerabilities (USN-7274-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7274-1 advisory. It was discovered that Atril incorrectly handled certain PDF files. An attacker could possibly use this issue to cause a denial o...

CVE-2025-26758

creationtimestamp| type| source ---|---|--- 2025-02-17 11:43:19+00:00| seen| https://infosec.exchange/users/cve/statuses/114019047703215178 2025-02-17 12:15:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3liepy5pd4r27 2025-02-17 14:02:15+00:00| seen|...

MAL-2025-1430 Malicious code in p2pb2b-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59f7063c9fcff0127b36c127dedd6b0a9f5ea43bc5ae8534adea55a756413730 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

IBM Security Verify Access Authorization Issues Vulnerability

IBM Security Verify Access ISAM is a service from International Business Machines IBM that improves user access security. The service enables secure and simple access to platforms such as web, mobile, IoT and cloud technologies through the use of risk-based access, single sign-on, integrated acce...

ALSA-2025:1611 Important: nodejs:22 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: undici: Undici Uses Insufficiently Random Values CVE-2025-22150 nodejs: Node.js Worker Thread Exposure via Diagnostics Channel CVE-2025-23083...

CVE-2024-57970

creationtimestamp| type| source ---|---|--- 2025-02-16 04:15:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3libeoe5ts42g 2025-02-16 05:11:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4575 2025-02-16 07:05:20+00:00| seen|...

OPENSUSE-SU-2025:14814-1 obs-service-cargo-4.5.0-2.1 on GA media

These are all security issues fixed in the obs-service-cargo-4.5.0-2.1 package on the GA media of openSUSE Tumbleweed...

Advisory ROSA-SA-2025-2683

Software: grub2 2.02 OS: ROSA Virtualization 3.0 packageevrstring: grub2-2.02-148.0.3 CVE-ID: CVE-2022-2601 BDU-ID: 2022-06819 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the grubfontconstructglyph function of the Grub2 operating systems boot loader is related to an operation exceeding buffer...

CVE-2024-13488

creationtimestamp| type| source ---|---|--- 2025-02-15 11:29:28+00:00| seen| https://infosec.exchange/users/cve/statuses/114007668658448921 2025-02-15 12:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li7p2ilhx22t 2025-02-15 13:11:17+00:00| seen|...

OPENSUSE-SU-2025:14812-1 chromedriver-133.0.6943.98-2.1 on GA media

These are all security issues fixed in the chromedriver-133.0.6943.98-2.1 package on the GA media of openSUSE Tumbleweed...

Fedora 41 : webkitgtk (2025-3e8ed13bf0)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-3e8ed13bf0 advisory. Update to WebKitGTK 2.46.6: Fix a crash when enabling Skia CPU rendering. Fix several crashes and rendering issues. Fix CVE-2024-54543,...

Fedora 40 : libheif (2025-666aaa6a0d)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-666aaa6a0d advisory. Latest upstream release. It adds support for tiles and fixes reading images generated by iOS 18+. See https://github.com/strukturag/libheif/releases for more...

GHSA-X4C5-C7RF-JJGV vulnerabilities

Vulnerabilities for packages: renovate...

CVE-2024-57951

In the Linux kernel, the following vulnerability has been resolved: hrtimers: Handle CPU state correctly on hotplug Consider a scenario where a CPU transitions from CPUHPONLINE to halfway through a CPU hotunplug down to CPUHPHRTIMERSPREPARE, and then back to CPUHPONLINE: Since hrtimerspreparecpu...

GHSA-XQ3W-V528-46RV

creationtimestamp| type| source ---|---|--- 2025-02-14 15:15:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4455 2025-06-17 12:51:43+00:00| seen| https://gist.github.com/safer-bot/74e21949896b589baa948e9ed6f5748a 2025-07-16 05:05:11+00:00| seen|...

SUSE-SU-2025:0551-1 Security update for python311

This update for python311 fixes the following issues: - CVE-2025-0938: domain names containing square brackets are not identified as incorrect by urlparse. bsc1236705 Other fixes: - Update to version 3.11.11. - Remove -IVendor/ from python-config. bsc1231795...

CVE-2025-23766 WordPress OPSI Israel Domestic Shipments plugin <= 2.8.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in ashamil OPSI Israel Domestic Shipments woo-ups-pickup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects OPSI Israel Domestic Shipments: from n/a through = 2.8.2...

SUSE-SU-2025:0524-1 Security update for SUSE Manager Client Tools

This update fixes the following issues: golang-github-prometheus-prometheus was updated from version 2.45.6 to 2.53.3 jscPED-11649: - Security issues fixed: CVE-2024-51744: Updated golang-jwt to version 5.0 to fix bad error handling bsc1232970 - Highlights of other changes: Performance: +...