Security update for Mesa

This update for Mesa fixes the following issues: CVE-2023-45913: Fixed NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId bsc1222040. CVE-2023-45919: Fixed buffer over-read in glXQueryServerString bsc1222041. CVE-2023-45922: Fixed segmentation violation in glXGetDrawableAttribute...

The vulnerability in Firefox and Firefox ESR web browsers, as well as in the Thunderbird email client, relates to reading data beyond the allowed buffer limits, allowing an attacker to cause a service failure.

The vulnerabilities in web browsers Firefox and Firefox ESR, as well as the Thunderbird email client, are related to reading data from buffer areas beyond the allowed limits. Exploiting these vulnerabilities can allow a remote attacker to cause service interruptions...

The vulnerability of the qdrawhelper_p.h component of the cross-platform development framework for Qt software, which allows a hacker to trigger a service failure.

The vulnerability of the qdrawhelperp.h component of the cross-platform framework for developing Qt software relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the QOutlineMapper::convertPath function in the cross-platform framework for Qt software development allows a attacker to cause a service failure.

The vulnerability of the QOutlineMapper::convertPath function in the cross-platform framework for Qt software development is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability in the module/loaders/loader_ico.c component of the Imlib2 image processing library allows a attacker to cause a service failure.

The vulnerability in the modules/loaders/loaderico.c component of the Imlib2 image processing library is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability in the driver/net/dsa/mv88e6xxx/global1_atu.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/net/dsa/mv88e6xxx/global1atu.c component of the Linux operating system is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the fib6_nh_flush_exceptions() function in the net/ipv6/route.c component of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the fib6nhflushexceptions function in the net/ipv6/route.c component of the Linux operating system is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the net_openvswitch/actions.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the netopenvswitch/actions.c component of the Linux kernel relates to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability can allow an attacker to cause a service failure...

Vulnerability of Microsoft .NET Framework, .NET software platforms, and Microsoft Visual Studio development tools: This vulnerability relates to operations that occur outside of the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft’s software platforms, such as the .NET Framework and Microsoft Visual Studio, relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2025-1126)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the USB-Audio component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the USB-Audio component in the Linux operating system is related to errors in reading beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

EulerOS 2.0 SP8 : ruby (EulerOS-SA-2025-1129)

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A buffer-overread issue was discovered in StringIO 3.0.1, as distributed in Ruby 3.0.x through 3.0.6 and 3.1.x through 3.1.4. The ungetbyte and unge...

Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2025-1129)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the Ivanti EPM endpoint management software, related to reading data beyond the buffer in memory, allows a hacker to trigger a service failure.

The vulnerability of the Ivanti EPM endpoint management software is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability of the Ivanti EPM endpoint management software, related to reading data beyond the buffer in memory, allows a hacker to trigger a service failure.

The vulnerability of the Ivanti EPM endpoint management software is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability of the Ivanti EPM endpoint management software, related to reading data beyond the buffer in memory, allows a hacker to trigger a service failure.

The vulnerability of the Ivanti EPM endpoint management software relates to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Ivanti EPM endpoint management software, related to reading data beyond the buffer in memory, allows a hacker to trigger a service failure.

The vulnerability of the Ivanti EPM endpoint management software is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Buffer Over-read

Overview Affected versions of this package are vulnerable to Buffer Over-read through the loading of a specially crafted file. Remediation Upgrade Microsoft.NETCore.App.Runtime.osx-arm64 to version 8.0.12, 9.0.1 or higher. References - GitHub Issue - GitHub Issue - Security Advisory...

Buffer Over-read

Overview Affected versions of this package are vulnerable to Buffer Over-read through the loading of a specially crafted file. Remediation Upgrade Microsoft.NETCore.App.Runtime.win-x86 to version 8.0.12, 9.0.1 or higher. References - GitHub Issue - GitHub Issue - Security Advisory...

Buffer Over-read

Overview Affected versions of this package are vulnerable to Buffer Over-read through the loading of a specially crafted file. Remediation Upgrade Microsoft.NETCore.App.Runtime.win-arm to version 8.0.12, 9.0.1 or higher. References - GitHub Issue - GitHub Issue - Security Advisory...