Security update 5.0.5 for Multi-Linux Manager Salt Bundle

This update fixes the following issues: venv-salt-minion: Security issues fixed: CVE-2024-38822: Fixed Minion token validation bsc1244561 CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport bsc1244564 CVE-2024-38824: Fixed directory traversal...

SUSE-SU-2025:02492-1 Security update 5.0.5 for Multi-Linux Manager Salt Bundle

This update fixes the following issues: venv-salt-minion: - Security issues fixed: - CVE-2024-38822: Fixed Minion token validation bsc1244561 - CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport bsc1244564 - CVE-2024-38824: Fixed directory...

Security update 5.0.5 for Multi-Linux Manager Salt Bundle

This update fixes the following issues: venv-salt-minion: Security issues fixed: CVE-2024-38822: Fixed Minion token validation bsc1244561 CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport bsc1244564 CVE-2024-38824: Fixed directory traversal...

SUSE-SU-2025:02491-1 Security update 5.0.5 for Multi-Linux Manager Salt Bundle

This update fixes the following issues: venv-salt-minion: - Security issues fixed: - CVE-2024-38822: Fixed Minion token validation bsc1244561 - CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport bsc1244564 - CVE-2024-38824: Fixed directory...

Security update 5.0.5 for Multi-Linux Manager Client Tools

This update fixes the following issues: salt: Security issues fixed: CVE-2024-38822: Fixed Minion token validation bsc1244561 CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport bsc1244564 CVE-2024-38824: Fixed directory traversal vulnerability in...

CVE-2025-48933

creationtimestamp| type| source ---|---|--- 2025-07-23 10:13:12+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lumrugl3oi2n 2025-07-23 14:47:59+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lunb7rep3w2d 2026-08-15 11:00:06+00:00| seen|...

CVE-2024-53286

creationtimestamp| type| source ---|---|--- 2025-07-23 04:34:33+00:00| seen| Telegram/8ciReg4XgtxU0DdOSBqBxWkKPmZ0YyveWaK086BwK-Kd0...

[SECURITY] Fedora 42 Update: libinput-1.28.903-1.fc42

libinput is a library that handles input devices for display servers and other applications that need to directly deal with input devices. It provides device detection, device handling, input device event processing and abstraction so minimize the amount of custom input code the user of libinput...

CVE-2025-43486

creationtimestamp| type| source ---|---|--- 2025-07-22 23:32:44+00:00| seen| Telegram/9ql1XM7NY-vN6wbxFpta8HMTeu0QE-Dg0shcpEa6UJPlAg...

SUSE CVE-2025-54121

Starlette is a lightweight ASGI Asynchronous Server Gateway Interface framework/toolkit, designed for building async web services in Python. In versions 0.47.1 and below, when parsing a multi-part form with large files greater than the default max spool size starlette will block the main thread t...

CVE-2022-41094

creationtimestamp| type| source ---|---|--- 2025-07-22 17:33:37+00:00| seen| Telegram/mwU823fjUGR66A3UbpNQIIGchpz98cybUTOpE64WRlxnWnw...

CVE-2022-41074

creationtimestamp| type| source ---|---|--- 2025-07-22 17:33:36+00:00| seen| Telegram/XyZDlknDZAHykRJUem3FfwKbRzWvAVmSOkeqzhJtEtka6l0...

CVE-2022-44669

creationtimestamp| type| source ---|---|--- 2025-07-22 17:33:30+00:00| seen| Telegram/cUIUdGx6JQ0LnOzlTZn11rkMHYp4YB7fpk79QGgBZu-W6XY...

CVE-2022-47212

creationtimestamp| type| source ---|---|--- 2025-07-22 17:33:18+00:00| seen| Telegram/HOCZvO6-xo7D2xYm7oqjMTrcOhfNWlavkiviXPeySWGdJaM...

GHSA-X6PH-R535-3VJW

creationtimestamp| type| source ---|---|--- 2025-07-22 15:35:13+00:00| seen| Telegram/T9k2jD0lODYwSYJ3Q13TtLM5Llye95g1bF6IFPeXCXQhUY...

This Week in Spring - July 22nd, 2025

Hi, Spring fans! It's almost SpringOne time!! AAAAH it's all moving so quickly! I can hardly stand it. SpringOne's next month, in lovely Las Vegas, and I'll be there. Will you? Have you registered? We'll be looking at the impending Spring Boot 4.0 and Spring Framework 7.0 releases! It's going to ...

Allocation of Resources Without Limits or Throttling

Overview starlette is a The little ASGI library that shines. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the UploadFile.write method when handling multipart forms containing files larger than the default spoolmaxsize. An attacker can...

DEBIAN-CVE-2025-54121

Starlette is a lightweight ASGI Asynchronous Server Gateway Interface framework/toolkit, designed for building async web services in Python. In versions 0.47.1 and below, when parsing a multi-part form with large files greater than the default max spool size starlette will block the main thread t...

UBUNTU-CVE-2025-54121

Starlette is a lightweight ASGI Asynchronous Server Gateway Interface framework/toolkit, designed for building async web services in Python. In versions 0.47.1 and below, when parsing a multi-part form with large files greater than the default max spool size starlette will block the main thread t...

GHSA-2C2J-9GV5-CJ73 Starlette has possible denial-of-service vector when parsing large files in multipart forms

Summary When parsing a multi-part form with large files greater than the default max spool size starlette will block the main thread to roll the file over to disk. This blocks the event thread which means we can't accept new connections. Details Please see this discussion for details:...