OPENSUSE-SU-2025:14974-1 ffmpeg-7-7.1.1-1.1 on GA media

These are all security issues fixed in the ffmpeg-7-7.1.1-1.1 package on the GA media of openSUSE Tumbleweed...

MAL-2025-3162 Malicious code in sasha-bsc-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6367569e4a02b7a1a9d97e0d7cc953768bdfbc31f96e2cc9deb7a5610eb149c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE: Security Advisory (SUSE-SU-2025:1101-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2025-3062 Malicious code in airbnb-dls-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d026d9563a73efac2558b2cf71cd6696600aecb85004606ba3dd3a87100bad0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DLA-4100-1 libdata-entropy-perl - security update

Bulletin has no description...

MAL-2025-2926 Malicious code in 3-0 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2893 Malicious code in secureshield2 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2888 Malicious code in passrdigitalportal (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2872 Malicious code in connection-colaborator (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2819 Malicious code in @uniqa/health-claim-ms-api (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2818 Malicious code in @uniqa/document-ms-api (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2817 Malicious code in @uniqa/digital-inventory-ms-spec-api (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2815 Malicious code in @uniqa/customer-masterdata-ms (npm)

--- -= Per source details. Do not edit below this line.=-...

OPENSUSE-SU-2025:14939-1 matrix-synapse-1.127.1-1.1 on GA media

These are all security issues fixed in the matrix-synapse-1.127.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14929-1 apache-commons-vfs2-2.10.0-1.1 on GA media

These are all security issues fixed in the apache-commons-vfs2-2.10.0-1.1 package on the GA media of openSUSE Tumbleweed...

MAL-2025-2690 Malicious code in miro-terms-banner-s3-uploader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03f414cb9ba131f7c282fb402bda0fd181018874345ee729525f90005f100e4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2710 Malicious code in solidity-ibc-eureka (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d923c9d1d5e1d4fa797e2afa71b32c1e06ba2710f46b4110977f40a9aac9bbd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OPENSUSE-SU-2025:14927-1 kubernetes1.32-apiserver-1.32.3-1.1 on GA media

These are all security issues fixed in the kubernetes1.32-apiserver-1.32.3-1.1 package on the GA media of openSUSE Tumbleweed...

MAL-2025-2622 Malicious code in team-bsb-bot (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron da5627aaacdf2bd8ab0ce2e469ea8635108e857776ed8766ee9df47c4b66aaa8 This package appears to be part of a larger ecosystem acting as a placeholder for orchestrating interactions with other bsb malicious packages...

nossrf Server-Side Request Forgery (SSRF)

Versions of the package nossrf before 1.0.4 are vulnerable to Server-Side Request Forgery SSRF, where an attacker can provide a hostname that resolves to a local or reserved IP address space and bypass the SSRF protection mechanism...