USN-7851-2 runc-app, runc-stable regression

USN-7851-1 fixed vulnerabilities in runC. The introduction of a new upstream release has caused regressions in runc-app and runc-stable. This update fixes the problem. Original advisory details: Lei Wang and Li Fubang discovered that runC incorrectly handled masked paths. An attacker could possib...

Google Chrome < 122.0.6261.128 Vulnerability

The version of Google Chrome installed on the remote macOS host is prior to 122.0.6261.128. It is, therefore, affected by a vulnerability as referenced in the 202403stable-channel-update-for-desktop12 advisory. - Use after free in Performance Manager in Google Chrome prior to 122.0.6261.128 allow...

Google Chrome Security Update (stable-channel-update-for-desktop_17-2025-11) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Stable Channel Update for Desktop

The Stable channel has been updated to 142.0.7444.175/.176 for Windows and 142.0.7444.176 for Mac and 142.0.7444.175 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and...

[SECURITY] [DSA 6059-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6059-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 16, 2025 https://www.debian.org/security/faq -...

Google Chrome Security Update (stable-channel-update-for-desktop_11-2025-11) - MAC OS X

Google Chrome is prone to a heap corruption vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome";...

DEBIAN-CVE-2025-40201

In the Linux kernel, the following vulnerability has been resolved: kernel/sys.c: fix the racy usage of tasklocktsk-groupleader in sysprlimit64 paths The usage of tasklocktsk-groupleader in sysprlimit64-doprlimit path is very broken. sysprlimit64 does gettaskstructtsk but this only protects...

EUVD-2025-102088

Malicious code in stablebadgerz3n npm...

MAL-2025-130318 Malicious code in stable_canidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67cf622e7807f93842baaa1e59881ae6aeddeaa3464a441803a7bd7e23d5affa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stable_badger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73330b901f9f071b56af1c93cf538fd1fe8b6edc5476db0781648efe8e76e7e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-102086

Malicious code in stablepigeonz3n npm...

EUVD-2025-102087

Malicious code in stablecanidaez3n npm...

EUVD-2025-88675

Malicious code in stablehippopotamusz3n npm...

EUVD-2025-74201

Malicious code in stableflamingomagenta-21 npm...

EUVD-2025-78233

Malicious code in stabletyrannosaurusz3n npm...

Malicious code in stable_tyrannosaurus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 338cae6fc1150d3977804ce22de50fa32ea2b1008ebf89021a6bf2e300ad2f62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80465

Malicious code in stablemackerel0xrequest npm...

EUVD-2025-84176

Malicious code in stableladybugz3n npm...

EUVD-2025-73548

Malicious code in stablemousez3n npm...

MAL-2025-96742 Malicious code in stable_mouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4861ff90a393434ce7a232a257153aae55cea94e24f304da20a790f41ba79629 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...