EUVD-2023-26414

Malicious code in bioql PyPI...

EUVD-2022-5279

Malicious code in bioql PyPI...

EUVD-2025-13571

Malicious code in bioql PyPI...

EUVD-2023-50809

Malicious code in bioql PyPI...

EUVD-2024-49080

Malicious code in bioql PyPI...

EUVD-2022-41542

Malicious code in bioql PyPI...

EUVD-2021-9462

Malicious code in bioql PyPI...

EUVD-2023-12206

Malicious code in bioql PyPI...

EUVD-2021-7722

Malicious code in bioql PyPI...

EUVD-2021-7705

Malicious code in bioql PyPI...

OPENSUSE-SU-2025:15598-1 python311-Django-5.2.7-1.1 on GA media

These are all security issues fixed in the python311-Django-5.2.7-1.1 package on the GA media of openSUSE Tumbleweed...

python311-Django4-4.2.25-1.1 on GA media (moderate)

python311-Django4-4.2.25-1.1 on GA media Announcement ID: openSUSE-SU-2025:15596-1 Rating: moderate Cross-References: CVE-2025-59681 CVE-2025-59682 CVSS scores: CVE-2025-59681 SUSE : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2025-59681 SUSE : 9.3...

OPENSUSE-SU-2025:15597-1 logback-1.2.13-1.1 on GA media

These are all security issues fixed in the logback-1.2.13-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-54089

CVE-2025-54089 is a cross-site scripting vulnerability in versions of secure access prior to 14.10. Attackers with administrative access to the console can interfere with another administrator’s access to the console. The attack complexity is low; there are no attack requirements. Privileges...

A flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS encryption boundary. A MitM attacker could use this flaw to inject a plaintext NBD_OPT_STRUCTURED_REPLY before proxying everything else a client sends to the server, potentially leading the client to terminate the NBD session. The highest threat from this vulnerability is to system availability.

...

curl-8.16.0-1.1 on GA media (moderate)

curl-8.16.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15590-1 Rating: moderate Cross-References: CVE-2025-10148 CVE-2025-9086 CVSS scores: CVE-2025-9086 SUSE : 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves 2 vulnerabilities c...

OPENSUSE-SU-2025:15594-1 azure-storage-azcopy-10.30.1-1.1 on GA media

These are all security issues fixed in the azure-storage-azcopy-10.30.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15593-1 MozillaFirefox-143.0.3-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-143.0.3-1.1 package on the GA media of openSUSE Tumbleweed...

Important: Red Hat Security Advisory: Insights proxy Container Image

Initial GA Release of Red Hat Insights proxy The Insights proxy Container is used by the Insights proxy product RPM and serves as an intermediary between cystomer systems in disconnected networks, air-gapped systems or systems with no outside connections and Insights. The Insights proxy routes al...

CVE-2023-53462 hsr: Fix uninit-value access in fill_frame_info()

In the Linux kernel, the following vulnerability has been resolved: hsr: Fix uninit-value access in fillframeinfo Syzbot reports the following uninit-value access problem. ===================================================== BUG: KMSAN: uninit-value in fillframeinfo net/hsr/hsrforward.c:601 inli...