CLSA-2025-1745585902 libvirt: Fix of CVE-2024-2496

CVE-2024-2496: Fix NULL pointer dereference in udevConnectListAllInterfaces function...

CLSA-2025-1745530850 libvirt: Fix of CVE-2024-2496

CVE-2024-2496: Fix NULL pointer dereference in udevConnectListAllInterfaces function...

can: etas_es58x: fix potential NULL pointer dereference on udev->serial

...

Security update for warewulf4

This update for warewulf4 fixes the following issues: warewulf4 was updated from version 4.5.8 to 4.6.0: Security issues fixed for version 4.6.0: CVE-2025-22869: Fixed Denial of Service vulnerability in the Key Exchange of golang.org/x/crypto/ssh bsc1239322 CVE-2025-22870: Fixed proxy bypass usin...

PT-2025-18476

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use after free issue has been resolved in the Linux kernel. The problem occurs when the memory pointed to by priv is freed at the end of the at76 delete device function, but the code...

SUSE CVE-2025-21773

In the Linux kernel, the following vulnerability has been resolved: can: etases58x: fix potential NULL pointer dereference on udev-serial The driver assumed that es58xdev-udev-serial could never be NULL. While this is true on commercially available devices, an attacker could spoof the device...

AZL-57929 CVE-2025-21773 affecting package kernel for versions less than 6.6.79.1-1

In the Linux kernel, the following vulnerability has been resolved: can: etases58x: fix potential NULL pointer dereference on udev-serial The driver assumed that es58xdev-udev-serial could never be NULL. While this is true on commercially available devices, an attacker could spoof the device...

UBUNTU-CVE-2025-21773

In the Linux kernel, the following vulnerability has been resolved: can: etases58x: fix potential NULL pointer dereference on udev-serial The driver assumed that es58xdev-udev-serial could never be NULL. While this is true on commercially available devices, an attacker could spoof the device...

CVE-2025-21773 can: etas_es58x: fix potential NULL pointer dereference on udev->serial

In the Linux kernel, the following vulnerability has been resolved: can: etases58x: fix potential NULL pointer dereference on udev-serial The driver assumed that es58xdev-udev-serial could never be NULL. While this is true on commercially available devices, an attacker could spoof the device...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the etases58x driver not checking for udev-serial, which could lead to a null pointer dereference...

CLSA-2025-1740230407 libvirt: Fix of 2 CVEs

CVE-2024-1441: fix off-by-one error in udevListInterfacesByStatus - CVE-2024-2494: check for negative array lengths before allocation in remotedaemondispatch...

SUSE-SU-2025:20041-1 Security update for systemd

This update for systemd fixes the following issues: - Import commit 0512d0d1fc0b54a84964281708036a46ab39c153 0512d0d1fc cgroup: Rename effective limits internal table jscPED-5659 765846b70b cgroup: Restrict effective limits with global resource provision jscPED-5659 e29909088b test: Add effective...

libvirt security update

10.5.0-7.0.1 - Set SOURCEDATEEPOCH from changelog Orabug: 32019554 10.5.0-7 - qemu: Refactor default panic model RHEL-56451 - qemu: Sometimes the default panic model doesn't exist RHEL-56451 - qemu: Use pvpanic by default on aarch64 RHEL-56451 10.5.0-6 - udevListInterfaces: Honour array length fo...

SUSE SLED15: MozillaThunderbird / MozillaThunderbird-translations-common / etc (SUSE-SU-2024:3507-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3507-1 advisory. - Mozilla Thunderbird 128.2.3 MFSA 2024-43 bsc1229821 CVE-2024-8394: Crash when aborting...

SUSE-SU-2024:3507-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: - Mozilla Thunderbird 128.2.3 MFSA 2024-43 bsc1229821 CVE-2024-8394: Crash when aborting verification of OTR chat. CVE-2024-8385: WASM type confusion involving ArrayTypes. CVE-2024-8381: Type confusion when looking up a property name ...

RHSA-2009:0427 Red Hat Security Advisory: udev security update

Bulletin has no description...

RHSA-2005:864 Red Hat Security Advisory: udev security update

Bulletin has no description...

CVE-2024-44976

In the Linux kernel, the following vulnerability has been resolved: ata: patamacio: Fix DMA table overflow Kolbjørn and Jonáš reported that their 32-bit PowerMacs were crashing in pata-macio since commit 09fe2bfa6b83 "ata: patamacio: Fix maxsegmentsize with PAGESIZE == 64K". For example: kernel B...

CVE-2024-44976

In the Linux kernel, the following vulnerability has been resolved: ata: patamacio: Fix DMA table overflow Kolbjørn and Jonáš reported that their 32-bit PowerMacs were crashing in pata-macio since commit 09fe2bfa6b83 "ata: patamacio: Fix maxsegmentsize with PAGESIZE == 64K". For example: kernel B...

CVE-2024-44976 ata: pata_macio: Fix DMA table overflow

In the Linux kernel, the following vulnerability has been resolved: ata: patamacio: Fix DMA table overflow Kolbjørn and Jonáš reported that their 32-bit PowerMacs were crashing in pata-macio since commit 09fe2bfa6b83 "ata: patamacio: Fix maxsegmentsize with PAGESIZE == 64K". For example: kernel B...