OPENSUSE-SU-2025:14755-1 java-21-openj9-21.0.6.0-1.1 on GA media

These are all security issues fixed in the java-21-openj9-21.0.6.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14759-1 python312-3.12.9-1.1 on GA media

These are all security issues fixed in the python312-3.12.9-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14753-1 fq-0.14.0-1.1 on GA media

These are all security issues fixed in the fq-0.14.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14758-1 python310-3.10.16-2.1 on GA media

These are all security issues fixed in the python310-3.10.16-2.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-24911

In rare scenarios, the cpca process on the Security Management Server / Domain Management Server may exit unexpectedly, creating a core dump file. When the cpca process is down, VPN and SIC connectivity issues may occur if the CRL is not present in the Security Gateway's CRL cache...

CVE-2024-53355

Multiple incorrect access control issues in EasyVirt DCScope = 8.6.0 and CO2Scope = 1.3.0 allows remote authenticated attackers, with low privileges, to 1 add an admin user via the /api/user/addalias route; 2 modifiy a user via the /api/user/updatealias route; 4 delete users via the...

OPENSUSE-SU-2025:14746-1 go1.23-1.23.6-1.1 on GA media

These are all security issues fixed in the go1.23-1.23.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14745-1 go1.22-1.22.12-1.1 on GA media

These are all security issues fixed in the go1.22-1.22.12-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14749-1 java-1_8_0-openj9-1.8.0.442-1.1 on GA media

These are all security issues fixed in the java-180-openj9-1.8.0.442-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14748-1 java-17-openj9-17.0.14.0-1.1 on GA media

These are all security issues fixed in the java-17-openj9-17.0.14.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14750-1 python311-3.11.11-3.1 on GA media

These are all security issues fixed in the python311-3.11.11-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14744-1 flannel-0.26.4-1.1 on GA media

These are all security issues fixed in the flannel-0.26.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14751-1 python39-3.9.21-2.1 on GA media

These are all security issues fixed in the python39-3.9.21-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14747-1 java-11-openj9-11.0.26.0-1.1 on GA media

These are all security issues fixed in the java-11-openj9-11.0.26.0-1.1 package on the GA media of openSUSE Tumbleweed...

[SECURITY] [DLA 4044-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4044-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort February 07, 2025 https://wiki.debian.org/LTS -...

xml2rfc has file inclusion irregularities

Version 3.12.0 changed xml2rfc so that it would not access local files without the presence of its new --allow-local-file-access flag. This prevented XML External Entity XXE injection attacks with xinclude and XML entity references. It was discovered that xml2rfc does not respect...

CVE-2025-24697

Missing Authorization vulnerability in Realwebcare Image Gallery – Responsive Photo Gallery awesome-responsive-photo-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Gallery – Responsive Photo Gallery: from n/a through = 1.0.5...

CVE-2024-54840

PVWA Password Vault Web Access in CyberArk Privileged Access Manager Self-Hosted before 14.4 does not properly address environment issues that can contribute to Host header injection...

CVE-2024-53994

Discourse is an open source platform for community discussion. In affected versions users who disable chat in preferences could still be reachable in some cases. This problem has been patched in the latest version of Discourse. Users are advised to upgrade. Users unable to upgrade should disable...

CVE-2024-10383

An issue has been discovered in the gitlab-web-ide-vscode-fork component distributed over CDN affecting all versions prior to 1.89.1-1.0.0-dev-20241118094343and used by all versions of GitLab CE/EE starting from 15.11 prior to 17.3 and which also temporarily affected versions 17.4, 17.5 and 17.6,...