10930 matches found
govulncheck-vulndb-0.0.20250108T191942-1.1 on GA media (moderate)
govulncheck-vulndb-0.0.20250108T191942-1.1 on GA media Announcement ID: openSUSE-SU-2025:14624-1 Rating: moderate Cross-References: CVE-2024-25133 CVE-2024-28892 CVE-2024-45387 CVE-2024-54148 CVE-2024-55196 CVE-2024-55947 CVE-2024-56362 CVE-2024-56513 CVE-2024-56514 CVE-2025-21609 CVE-2025-21613...
USN-7185-2: Linux kernel (Azure) vulnerabilities
Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an integer overflow vulnerability. A local attacker could use this to cause a denial of service system crash. CVE-2022-36402 Zheng Wang discovered a use-after-free in the Renesas Ethernet AVB driver in th...
[SECURITY] [DSA 5840-1] chromium security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5840-1 [email protected] https://www.debian.org/security/ Andres Salomon January 09, 2025 https://www.debian.org/security/faq -...
CVE-2024-13041
An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1. When a user is created via the SAML provider, the external groups setting overrides the external provider configuration. A...
CVE-2024-6324
An issue was discovered in GitLab CE/EE affecting all versions starting from 15.7 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1. It was possible to trigger a DoS by creating cyclic references between epics...
[slackware-security] mozilla-firefox
New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-firefox-128.6.0esr-i686-1slack15.0.txz: Upgraded. This update contains security fixes and improvements. For more...
Slackware: Security Advisory (SSA:2025-008-02)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OPENSUSE-SU-2025:14624-1 govulncheck-vulndb-0.0.20250108T191942-1.1 on GA media
These are all security issues fixed in the govulncheck-vulndb-0.0.20250108T191942-1.1 package on the GA media of openSUSE Tumbleweed...
Ubuntu 20.04 LTS : Linux kernel (Azure) vulnerabilities (USN-7194-1)
"The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7194-1 advisory. Andy Nguyen discovered that the Bluetooth L2CAP implementation in the Linux kernel contained a type- confusion error. A physically proximate remote...
Slackware: Security Advisory (SSA:2025-008-03)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OPENSUSE-SU-2025:14627-1 logback-1.2.11-4.1 on GA media
These are all security issues fixed in the logback-1.2.11-4.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:14625-1 gstreamer-plugins-base-1.24.11-1.1 on GA media
These are all security issues fixed in the gstreamer-plugins-base-1.24.11-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:14628-1 python311-slixmpp-1.8.6-1.1 on GA media
These are all security issues fixed in the python311-slixmpp-1.8.6-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:14626-1 kubo-0.32.1-1.1 on GA media
These are all security issues fixed in the kubo-0.32.1-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2024-12431
An issue was discovered in GitLab CE/EE affecting all versions starting from 15.5 before 17.5.5, 17.6 before 17.6.3, and 17.7 before 17.7.1, in which unauthorized users could manipulate the status of issues in public projects...
CVE-2025-0194
An issue was discovered in GitLab CE/EE affecting all versions starting from 17.4 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1. Under certain conditions, access tokens may have been logged when API requests were made in a specific manner...
CVE-2024-56778
In the Linux kernel, the following vulnerability has been resolved: drm/sti: avoid potential dereference of error pointers in stihqvdpatomiccheck The return value of drmatomicgetcrtcstate needs to be checked. To avoid use of error pointer 'crtcstate' in case of the failure...
CVE-2025-0240
Parsing a JavaScript module as JSON could, under some circumstances, cause cross-compartment access, which may result in a use-after-free. This vulnerability was fixed in Firefox 134, Firefox ESR 128.6, Thunderbird 134, and Thunderbird 128.6...
USN-7167-2: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Ext4 file system; - Network traffic control; - VMware vSockets driver; CVE-2024-50264, CVE-2024-49967, CVE-2024-530...