SUSE-SU-2025:20106-1 Security update for curl

This update for curl fixes the following issues: - CVE-2024-11053: Fixed password leak used for the first host to the followed-to host under certain circumstances bsc1234068...

CVE-2024-13612

creationtimestamp| type| source ---|---|--- 2025-02-01 13:15:34+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh4lu5sblk2c 2025-02-01 15:25:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3767 2025-02-01 15:37:39+00:00| seen|...

CVE-2024-13429

creationtimestamp| type| source ---|---|--- 2025-02-01 08:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh433zvyow2e 2025-02-01 09:26:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3743 2025-02-01 09:47:51+00:00| seen|...

CVE-2025-0939

creationtimestamp| type| source ---|---|--- 2025-02-01 07:15:27+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh3xqa72pz2c 2025-02-01 07:40:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lh3z4bdpmc2k 2025-02-01 09:26:09+00:00|...

CVE-2025-24827

creationtimestamp| type| source ---|---|--- 2025-01-31 13:15:50+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh23fq27m427 2025-01-31 15:22:27+00:00| seen| https://t.me/cvedetector/16933 2025-02-01 17:28:08+00:00| seen|...

CVE-2025-0507

creationtimestamp| type| source ---|---|--- 2025-01-31 04:31:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113921090669736904 2025-01-31 05:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzal4miix2t 2025-01-31 07:00:11+00:00| seen|...

DEBIAN-CVE-2024-57947

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfsetpipapo: fix initial map fill The initial buffer has to be inited to all-ones, but it must restrict it to the size of the first field, not the total field size. After each round in the map search step, the result a...

UBUNTU-CVE-2024-57947

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfsetpipapo: fix initial map fill The initial buffer has to be inited to all-ones, but it must restrict it to the size of the first field, not the total field size. After each round in the map search step, the result a...

SUSE CVE-2025-21658

In the Linux kernel, the following vulnerability has been resolved: btrfs: avoid NULL pointer dereference if no valid extent tree BUG Syzbot reported a crash with the following call trace: BTRFS info device loop0: scrub: started on devid 1 BUG: kernel NULL pointer dereference, address:...

SUSE CVE-2025-21664

In the Linux kernel, the following vulnerability has been resolved: dm thin: make getfirstthin use rcu-safe list first function The documentation in rculist.h explains the absence of listemptyrcu and cautions programmers against relying on a listempty - listfirst sequence in RCU safe code. This i...

CVE-2025-21532

creationtimestamp| type| source ---|---|--- 2025-01-21 21:18:07+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbrow5i2t2p 2025-02-25 05:24:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5249...

DEBIAN-CVE-2025-21664

In the Linux kernel, the following vulnerability has been resolved: dm thin: make getfirstthin use rcu-safe list first function The documentation in rculist.h explains the absence of listemptyrcu and cautions programmers against relying on a listempty - listfirst sequence in RCU safe code. This i...

UBUNTU-CVE-2025-21664

In the Linux kernel, the following vulnerability has been resolved: dm thin: make getfirstthin use rcu-safe list first function The documentation in rculist.h explains the absence of listemptyrcu and cautions programmers against relying on a listempty - listfirst sequence in RCU safe code. This i...

CVE-2025-21664

CVE-2025-21664 affects the Linux kernel dm-thin component. Root cause: get_first_thin did a non-RCU-safe sequence (list_empty -> list_first) that could race with concurrent updates, risking dereferencing a stale/altered list head during process_deferred_bios flow and leading to a crash. Connec...

PT-2025-4345

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description A vulnerability in the Linux kernel's dm-thin functionality has been resolved. The issue arises from the use of a non-RCU-safe list handling function in the get first thin function, which can...

WordPress First Comment Redirect plugin <= 1.0.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin First Comment Redirect versions = 1.0.3...

The First Password on the Internet

It was created in 1973 by Peter Kirstein: So from the beginning I put password protection on my gateway. This had been done in such a way that even if UK users telephoned directly into the communications computer provided by Darpa in UCL, they would require a password. In fact this was the first...

Segmentation fault due to lack of bound check

In this case, the "fastfloat::common::AsciiStr::first" method within the "AsciiStr" struct uses the unsafe keyword to reading from memory without performing bounds checking. Specifically, it directly dereferences a pointer offset by "self.ptr". Because of the above reason, the method accesses...

CISA: Building Relationships with First Responders: Tools and Resources

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

UBUNTU-CVE-2024-57881

In the Linux kernel, the following vulnerability has been resolved: mm/pagealloc: don't call pfntopage on possibly non-existent PFN in splitlargebuddy In splitlargebuddy, we might call pfntopage on a PFN that might not exist. In corner cases, such as when freeing the highest pageblock in the last...