CVE-2025-43389

A privacy issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, iOS 18.7.2 and iPadOS 18.7.2, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, visionOS 26.1. An app may be able to access sensitive user data...

Important: libsoup security update

The libsoup packages provide an HTTP client and server library for GNOME. Security Fixes: libsoup: Integer Overflow in Cookie Expiration Date Handling in libsoup CVE-2025-4945 libsoup: Out-of-Bounds Read in Cookie Date Handling of libsoup HTTP Library CVE-2025-11021 For more details about the...

CLSA-2025-1762182516 libqb: Fix of CVE-2023-39976

CVE-2023-39976: Fix buffer overflow in logblackbox.c by correctly limiting log message length...

PT-2025-50983

Name of the Vulnerable Software and Affected Versions macOS versions prior to Tahoe 26.1 Description An issue involving insufficient restrictions on application access to user data was identified and resolved. The fix implements additional restrictions to address the permissions problem...

PT-2025-44851

Name of the Vulnerable Software and Affected Versions macOS versions prior to 14.8.2 macOS versions prior to 15.7.2 Description An application may be able to access user-sensitive data due to insufficient entitlement checks. The issue was resolved by implementing additional entitlement checks...

python311-starlette-0.49.1-1.1 on GA media (moderate)

python311-starlette-0.49.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:15696-1 Rating: moderate Cross-References: CVE-2025-62727 CVSS scores: CVE-2025-62727 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-62727 SUSE : 8.2...

[slackware-security] seamonkey

New seamonkey packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/seamonkey-2.53.22-i686-1slack15.0.txz: Upgraded. This update contains security fixes and improvements. For more information, see:...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: nvme-tcp: sanitize request list handling Validating the request in nvmetcphandler2t to ensure it is not part of any list; otherwise, a malicious R2T PDU might introduce a loop into the request list processing...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: NFS: Fixed the filehandle bounds checking in nfsfhtodentry. The function needs to check the minimum filehandle length before it can access the embedded filehandle...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: drm/i915/gt: Fixed an issue where the timeline was held on the VMA allocation error. The following errors have been sporadically reported by CI when a test unbinds the i915 driver on a ring submission platform: 239.330153...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: scsi: megaraidsas: Fixed an invalid node index issue. On systems with DRAM interleave enabled, out-of-bound access was detected: megaraidsas 0000:3f:00.0: Requested/available msix 128/128 pollqueue 0 ------------ Cut here...

coreboot-utils-25.09-2.1 on GA media (moderate)

coreboot-utils-25.09-2.1 on GA media Announcement ID: openSUSE-SU-2025:15675-1 Rating: moderate Cross-References: CVE-2025-62813 CVSS scores: CVE-2025-62813 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2025-62813 SUSE : 6.8...

ongres-scram-3.2-7.1 on GA media (moderate)

ongres-scram-3.2-7.1 on GA media Announcement ID: openSUSE-SU-2025:15680-1 Rating: moderate Cross-References: CVE-2025-59432 CVSS scores: CVE-2025-59432 SUSE : 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N CVE-2025-59432 SUSE : 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:...

libmozjs-115-0-115.15.0-6.1 on GA media (moderate)

libmozjs-115-0-115.15.0-6.1 on GA media Announcement ID: openSUSE-SU-2025:15678-1 Rating: moderate Cross-References: CVE-2025-62813 CVSS scores: CVE-2025-62813 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2025-62813 SUSE : 6.8...

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix possible UAF in amdgpucspass1 Since the gangsize check is outside of chunk parsing loop, we need to reset i before we free the chunk data. Suggested by Ye Zhang @VAR10CK of Baidu Security...

OESA-2025-2616 python-aiomysql security update

aiomysql is a "driver" for accessing a MySQL database from the asyncio PEP-3156/tulip framework. It depends on and reuses most parts of PyMySQL . aiomysql tries to be like awesome aiopg library and preserve same api, look and feel. Security Fixes: aiomysql is a library for accessing a MySQL...

OESA-2025-2614 dav1d security update

dav1d is a new AV1 cross-platform Decoder, open-source, and focused on speed and correctness. Security Fixes: An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past...

OESA-2025-2611 libwebsockets security update

Libwebsockets LWS is a flexible, lightweight pure C library for implementing modern network protocols easily with a tiny footprint, using a nonblocking event loop. Security Fixes: Use After Free vulnerability exists in the WebSocket server implementation in lwshandshakeserver in warmcat...

OESA-2025-2587 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

OESA-2025-2591 firefox security update

Security Fixes: Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal /../ part in the path could be used to override the specified host. This could contribute to security problems in web sites. This vulnerability affects Firefox 120, Firefox ESR 115.5.0, and...