Security update for openvpn

This update for openvpn fixes the following issues: CVE-2024-5594: Fixed handling of null bytes and invalid characters in control messages bsc1235147. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

DEBIAN-CVE-2025-30211

Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.1, 26.2.5.10, and 25.3.2.19, a maliciously formed KEX init message can result with high memory usage. Implementation does not verify RFC specified limits on algorithm names 64 characters provided in K...

CVE-2025-2910

User enumeration in the password reset module of the MeetMe authentication service in versions prior to 2024-09 allows an attacker to determine whether an email address is registered through specific error messages...

CVE-2025-31335

A flaw was found in the OpenSAML C++ library. This vulnerability allows forging signed SAML messages via parameter manipulation when using SAML bindings that rely on non-XML signatures. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the...

DEBIAN-CVE-2025-31335

The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation when using SAML bindings that rely on non-XML signatures...

UBUNTU-CVE-2025-31335

The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation when using SAML bindings that rely on non-XML signatures...

Erlang/OTP security vulnerabilities

Erlang/OTP is an Erlang/OTP open source library written in JavaScript that handles handling exceptions. The library can catch exceptions raised by the node.js built-in API. A security vulnerability exists in Erlang/OTP versions prior to OTP-27.3.1, prior to OTP-26.2.5.10, and prior to...

OpenSAML security vulnerabilities

OpenSAML is a set of open source C++ and Java libraries from OpenSAML Open Source designed to support developers using the Security Assertion Markup Language SAML. A security vulnerability exists in OpenSAML versions prior to 3.3.1 that stems from a parameter manipulation that could lead to a...

CVE-2025-31335

The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation when using SAML bindings that rely on non-XML signatures...

CVE-2025-2910: Observable Response Discrepancy

User enumeration in the password reset module of the MeetMe authentication service in versions prior to 2024-09 allows an attacker to determine whether an email address is registered through specific error messages...

CVE-2025-2877: Debug Messages Revealing Unnecessary Information

A flaw was found in the Ansible Automation Platform's Event-Driven Ansible. In configurations where verbosity is set to "debug", inventory passwords are exposed in plain text when starting a rulebook activation. This issue exists for any "debug" action in a rulebook and also affects Event Streams...

CVE-2025-31335: Improper Verification of Cryptographic Signature

The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation when using SAML bindings that rely on non-XML signatures...

CVE-2025-2255

GitLab EE/CE AppSec is affected by CVE-2025-2255, with XSS due to error messages in versions 13.5.0–before 17.8.6, 17.9–before 17.9.3, and 17.10–before 17.10.1. The issue is rooted in improper output/handling of error messages, allowing cross-site scripting. Several connected sources corroborate ...

CVE-2025-2255

An issue has been discovered in Gitlab EE/CE for AppSec affecting all versions from 13.5.0 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1. Certain error messages could allow Cross-Site Scripting attacks XSS. for AppSec...

RHSA-2025:2874

creationtimestamp| type| source ---|---|--- 2025-03-27 04:25:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9006 2025-03-27 04:25:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9007 2025-03-27 04:25:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9008 2025-03-27 04:25:52+00:00...

RHSA-2025:2861

creationtimestamp| type| source ---|---|--- 2025-03-27 04:25:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9006 2025-03-27 04:25:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9007 2025-03-27 04:25:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9008 2025-03-27 04:25:52+00:00...

RHSA-2025:2875

creationtimestamp| type| source ---|---|--- 2025-03-27 04:25:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9006 2025-03-27 04:25:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9007 2025-03-27 04:25:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9008 2025-03-27 04:25:52+00:00...

Linux seq_oss_synth Heap Buffer Overflow DoS

The vulnerability in the sound/core/seq/oss/seqosssynth.c module of the Linux operating system is related to synchronization errors when using a shared resource during the processing of SysEx messages. Exploiting this vulnerability can allow an attacker to cause a service failure...

GitLab Enterprise Edition (EE) and GitLab Community Edition (CE) cross-site scripting vulnerabilities

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition EE and GitLab Community Edition CE A cross-site scripting...

Netscaler sends Syslog messages for SSL Handshake with ””

Syslog messages sent from the NetScaler to the external Syslog Server includes unexpected occurrence of "\n" Interestingly, a pattern is seen where ”\n” is seen periodically after every 6 messagesor similar Need to know if this a normal behavior or it's an issue...