EUVD-2025-54632

Malicious code in empty-amber-ferret npm...

EUVD-2025-54631

Malicious code in empty-gold-duck npm...

Malicious code in empty-gold-duck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 909f8841d6e615146474cebc7e51e2b8bbd324babd6279e42926a2f6605daa62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54629

Malicious code in empty-white-fly npm...

EUVD-2025-50303

Malicious code in emptyjaguarz3n npm...

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issue: Mozilla Thunderbird is updated to 140.4. changed: Account Hub is now disabled by default for second email account bmo1992027 changed: Flatpak runtime has been updated to Freedesktop SDK 24.08 bmo1952100 fixed: Users could not read mail...

SUSE-SU-2025:4006-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issue: Mozilla Thunderbird is updated to 140.4. changed: Account Hub is now disabled by default for second email account bmo1992027 changed: Flatpak runtime has been updated to Freedesktop SDK 24.08 bmo1952100 fixed: Users could not read mail...

SUSE CVE-2025-59836

Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.1.5 and 1.0.2, there is a nil pointer dereference vulnerability in the Omni Resource Service allows unauthenticated users to cause a server panic and denial of service by sending empty create/update resource reques...

DEBIAN-CVE-2025-10966

curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms. This prevents curl from detecting MITM attackers and more...

galera and mariadb security update

An update is available for galera. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Galera is a fast synchronous multimaster wsrep provider replication engine for...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990624)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990624 advisory. In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: Correct check for empty list Since commit a3c53be55c95 net: dsa: mv88e6xxx:...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990581)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990581 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: configfs: Prevent OOB read/write in usbstringcopy Userspace provided string 's' coul...

GO-2025-4021 Omni is Vulnerable to DoS via Empty Create/Update Resource Requests in github.com/siderolabs/omni

Omni is Vulnerable to DoS via Empty Create/Update Resource Requests in github.com/siderolabs/omni...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989314)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989314 advisory. In the Linux kernel, the following vulnerability has been resolved: net: netlink: afnetlink: Prevent empty skb by adding a check on len. Adding a check on len...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989844)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989844 advisory. In the Linux kernel, the following vulnerability has been resolved: exec: Force single empty string when argv is empty Quoting1 Ariadne Conill: In several other...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990272)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990272 advisory. In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: Correct check for empty list Since commit a3c53be55c95 net: dsa: mv88e6xxx:...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989854)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989854 advisory. In the Linux kernel, the following vulnerability has been resolved: batman-adv: bypass empty buckets in batadvpurgeorigref Many syzbot reports are pointing to soft...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989967)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989967 advisory. In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: Correct check for empty list Since commit a3c53be55c95 net: dsa: mv88e6xxx:...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-989913)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989913 advisory. In the Linux kernel, the following vulnerability has been resolved: exec: Force single empty string when argv is empty Quoting1 Ariadne Conill: In several other...

mariadb: MariaDB Server Crash Due to Empty Backtrace Log

A flaw was found in MariaDB Server. This vulnerability may allow an attacker to cause a crash via an issue related to makeaggrtablesinfo and optimizestage2, resulting in an empty backtrace log...