24179 matches found
CLSA-2025-1745530844 libsoup: Fix of CVE-2024-52530
CVE-2024-52530: prevent HTTP request smuggling by properly handling '0' characters at the end of header names...
Security update for glib2
This update for glib2 fixes the following issues: CVE-2025-3360: Fixed integer overflow and buffer underread when parsing a very long and invalid ISO 8601 timestamp with gdatetimenewfromiso8601 bsc1240897 Patch Instructions: To install this SUSE update use the SUSE recommended installation method...
SUSE-SU-2025:1365-1 Security update for mozjs60
This update for mozjs60 fixes the following issues: - CVE-2024-56431: Fixed a negative shift in huffdec.c bsc1234837...
PT-2025-17744 · Woocommerce · Holest Engineering Spreadsheet Price Changer
Name of the Vulnerable Software and Affected Versions: Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light versions through 2.4.37 Description: The issue is related to Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP...
CLSA-2025-1745426658 buildah: Fix of CVE-2024-9675
CVE-2024-9675: fix incorrect handling of paths in cache mounts that allows mounting of arbitrary directories in a container...
RHEL 8 : mod_auth_openidc:2.3 (RHSA-2025:4128)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:4128 advisory. The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connec...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.18.10 security and extras update
Red Hat OpenShift Container Platform release 4.18.10 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a security impact of...
SUSE-SU-2025:20196-1 Security update for helm
This update for helm fixes the following issues: - Update to version 3.17.2 bsc1238688, CVE-2025-22870: Updating to 0.37.0 for x/net builddeps: bump the k8s-io group with 7 updates - Update to version 3.17.1: merge null child chart objects builddeps: bump the k8s-io group with 7 updates fix: chec...
This Week in Spring - April 22nd, 2025
Hi, Spring fans! Welcome to another installment of This Week in Spring , which I'm writing from magnificent Minneapolis, Minnesota, where I'm recording an amazing Frontend Masters course introducing Spring Boot. I love this article introducing Spring AI in JavaPro magazine Want to run an LLM...
PT-2025-20540
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference issue has been resolved in the Linux kernel. The issue is related to the mlx5 create inner ,ttc table functions, where a NULL check has been added for the retu...
chromium -- multiple security fixes
Chrome Releases reports: This update includes 1 security fix...
CLSA-2025-1745269602 libsndfile: Fix of CVE-2022-33065
CVE-2022-33065: fix int overflow in dataend calculation...
RHEL 8 : kernel (RHSA-2025:3871)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:3871 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ALSA: usb-audio: Fix out of bounds read...
RHEL 8 : Red Hat JBoss Enterprise Application Platform 8.0.7 (RHSA-2025:3989)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:3989 advisory. Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime. This release o...
RHEL 9 : kernel-rt (RHSA-2025:3889)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:3889 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Securi...
RHEL 7 : kernel-rt (RHSA-2025:3901)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:3901 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Securi...
RHEL 9 : kernel (RHSA-2025:3888)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:3888 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ALSA: usb-audio: Fix out of bounds read...
OPENSUSE-SU-2025:0133-1 Security update for chromium
This update for chromium fixes the following issue: chromium 135.0.7049.95 stable release 2025-04-15 boo1241288: CVE-2025-3619: Heap buffer overflow in Codecs CVE-2025-3620: Use after free in USB...
[slackware-security] zsh
New zsh packages are available for Slackware 15.0 to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/zsh-5.9-i586-1slack15.0.txz: Upgraded. This release fixes a security issue in zsh-5.8: Some prompt expansion sequences, such as %F, support 'argument...