OPENSUSE-SU-2025:14813-1 keylime-config-7.12.1-1.1 on GA media

These are all security issues fixed in the keylime-config-7.12.1-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-25285 vulnerabilities

Vulnerabilities for packages: renovate...

MAL-2025-1348 Malicious code in deepcoin-internal (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00eb83eff2eeb19ff872da9610ae40247140536ea979ba39b846c577ab024631 Any computer that has this package install...

MAL-2025-1328 Malicious code in bitmart-test (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ca51f117bee2cff1b712ba689ce844c19ec597faf4268714f41fb013e464c6e Any computer that has this package install...

MAL-2025-1308 Malicious code in gate-production (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e5829c327248d41abf070c9c23598e436a2fefc55efc2986ff6ca1ba771ef61 Any computer that has this package install...

OPENSUSE-SU-2025:14805-1 postgresql13-13.19-1.1 on GA media

These are all security issues fixed in the postgresql13-13.19-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-0376 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ee-fips, gitlab-pages, gitlab-ee-fips, gitlab-pages-fips, gitlab-runner-fips, gitlab-cng, gitlab-rails-ee, gitlab-cng-fips, gitlab-ee...

OPENSUSE-SU-2025:14797-1 kernel-firmware-serial-20250206-1.1 on GA media

These are all security issues fixed in the kernel-firmware-serial-20250206-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-37WC-H8XC-5HC4 vulnerabilities

Vulnerabilities for packages: shadowsocks-rust, linkerd2-proxy...

DSA-5863-1 libtasn1-6 - security update

Bulletin has no description...

CVE-2024-21502

Versions of the package fastecdsa before 2.3.2 are vulnerable to Use of Uninitialized Variable on the stack, via the curvemathmul function in src/curveMath.c, due to being used and interpreted as user-defined type. Depending on the variable's actual value it could be arbitrary free, arbitrary...

OPENSUSE-SU-2025:14731-1 MozillaThunderbird-128.7.0-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-128.7.0-1.1 package on the GA media of openSUSE Tumbleweed...

MAL-2025-1013 Malicious code in apple-sdk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4113cf662e414936dfc540b2ebc7c134b8d83e46635daadf59a0105f86c70feb Any computer that has this package installed or running should be considered...

MAL-2025-1011 Malicious code in @infinid-indonesia/ui-kit (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4eeca2bfa3c0d32dbee35f8956b2e79049540d209630206d040f2573ff118c6 Any computer that has this package installed or running should be considered...

MAL-2025-1037 Malicious code in guests (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90c450f222886a91d7c733fcfbdf4a4b5104c0b4a1d1931f79e0bea1201f1398 Any computer that has this package installed or running should be considered...

MAL-2025-1034 Malicious code in com.siccity.gltfutility (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 201fb69ebbdbf7099f322edee00ed68a1cd7e707883db97efe712a72155f15e2 Any computer that has this package installed or running should be considered...

Malicious code in expense-management (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-774 Malicious code in @mrpudidi/gravatar (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-730 Malicious code in @wongapl/sliders (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-744 Malicious code in jqtools-overlay (npm)

The package communicates with a domain associated with malicious activity...