SUSE SLES12: grub2 / grub2-i386-pc / grub2-snapper-plugin / etc (SUSE-SU-2025:4197-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4197-1 advisory. - CVE-2025-54771: Fixed rubfileclose does not properly controls the fs refcount bsc1252931 - CVE-2025-61661: Fixed out-of-bounds write in...

Security update for grub2

This update for grub2 fixes the following issues: CVE-2025-54771: Fixed rubfileclose does not properly controls the fs refcount bsc1252931 CVE-2025-61661: Fixed out-of-bounds write in grubusbgetstring function bsc1252932 CVE-2025-61662: Fixed missing unregister call for gettext command may lead t...

Security update for grub2

This update for grub2 fixes the following issues: CVE-2025-54771: Fixed rubfileclose does not properly controls the fs refcount bsc1252931 CVE-2025-61662: Fixed missing unregister call for gettext command may lead to use-after-free bsc1252933 CVE-2025-61663: Fixed missing unregister call for norm...

SUSE-SU-2025:4152-1 Security update for grub2

This update for grub2 fixes the following issues: - CVE-2025-54771: Fixed rubfileclose does not properly controls the fs refcount bsc1252931 - CVE-2025-61662: Fixed missing unregister call for gettext command may lead to use-after-free bsc1252933 - CVE-2025-61663: Fixed missing unregister call fo...

Security update for grub2

This update for grub2 fixes the following issues: CVE-2025-54771: Fixed rubfileclose does not properly controls the fs refcount bsc1252931 CVE-2025-61661: Fixed out-of-bounds write in grubusbgetstring function bsc1252932 CVE-2025-61662: Fixed missing unregister call for gettext command may lead t...

SUSE-SU-2025:4143-1 Security update for grub2

This update for grub2 fixes the following issues: - CVE-2025-54771: Fixed rubfileclose does not properly controls the fs refcount bsc1252931 - CVE-2025-61661: Fixed out-of-bounds write in grubusbgetstring function bsc1252932 - CVE-2025-61662: Fixed missing unregister call for gettext command may...

CLSA-2025-1763059190 Update of gnutls

Bump the version...

Malicious code in yuda-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a8344478dd73acd6806529eadcb22a8323ac6ad0dd1ac9b71a9f6d3208a8539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145359 Malicious code in neptune-eridanus-jabbah-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf8e91c6a667fe241fd67d4152b461ba2a0c007607acea3a94c86dcbddc4247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142941 Malicious code in global-leda-xenon-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 711449061c304954070a6e0690741a6de984afff904bc2f2fe9f6e481fce0a3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fundamental_quokka_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8cf4548e76985922fca610f303a63cced4b11d10c46c64a1cd97c7ce7bd0476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-saguer77-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb011856af81d079928eb98f0f220ff817cbd0346bf2e2038df666c911c4b94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121070 Malicious code in joko-ketoprak31-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 332de84764a468a599484f59485797e7a54f8d0284f45e97840338114dd44dae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118466 Malicious code in zaki-tek98-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5728e234c9dee35bf967eed06a7f87c51e34fdd560cf639c9fcd9b1ca194847 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105978 Malicious code in mosley-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3f54f9021e6947c90e9fc17198ee6a2dfbcf924569bfc1c5c5cacc450e18ad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-empal58-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 556cea6631a1809bf07076c8f8a965015f3ede7ad69b5db5086a33fa410a9c88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74177 Malicious code in lisa-kue38-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a98f5b47e562064a3ddee9bd88b71a86c84af1dead750f203c0b8324f01e361e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in royal-olive-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c341bcdaaed3945acb51c1312b486e22ffa89bfd0169328df8631862d077bcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62542 Malicious code in dian-nasi56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c54a7164e488998a7bc70ccd0a6b219d1743c610659d20b84a5e733f69c474a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in persistent_rat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51c1e4fdbcd72076b778b77b23d9e69a35aba1e1be038aa4e831f3eddd21973f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...