USN-7348-1 python3.5, python3.8 vulnerabilities

It was discovered that the Python ipaddress module contained incorrect information about which IP address ranges were considered “private” or “globally reachable”. This could possibly result in applications applying incorrect security policies. This issue only affected Ubuntu 14.04 LTS and Ubuntu...

Malicious code in bsee-shared-hmd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71df5f00c494508630b3f07f67a0db2756f8cd8d1228cf9ef41f5dc6f6b071f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-24912

hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail...

Malicious code in codebarrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c801f0c455ad24f1a8ae960118a1bf1dab534b8279e3429ac736dd113fee639a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @shein-components-test-ump/text-to-speech-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a51a7cd403f53cbbc65d804830060941af889d9ec0f60acd449b59f89a081e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CLSA-2025-1741635940 python3: Fix of 2 CVEs

CVE-2024-11168: fix improper validation of bracketed hosts in urllib.parse.urlsplit and urlparse functions - CVE-2025-0938: fix incomplete algorithm of validating hosts by disallowing square brackets in domain names...

CLSA-2025-1741635599 python3: Fix of 2 CVEs

CVE-2024-11168: fix improper validation of bracketed hosts in urllib.parse.urlsplit and urlparse functions - CVE-2025-0938: fix incomplete algorithm of validating hosts by disallowing square brackets in domain names...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-57938)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-57938 advisory. - In the Linux kernel, the following vulnerability has been resolved: net/sctp: Prevent autoclose integer...

Linux Distros Unpatched Vulnerability : CVE-2024-55629

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, TCP streams with TCP urgen...

Linux Distros Unpatched Vulnerability : CVE-2024-56552

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe/gucsubmit: fix race around suspendpending Currently in some testcases we can trigger: xe 0000:03:00.0: drm Assertion execqueuedestroyedq failed!...

Linux Distros Unpatched Vulnerability : CVE-2024-53432

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - While parsing certain malformed PLY files, PCL version 1.14.1 crashes due to an uncaught std::outofrange exception in PCLPointCloud2::at. This issue could...

Malicious code in migrate-npm-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40e88d87096c208b4f54619b9977a873f533856db5cc436e42261a8e9254e162 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Linux Distros Unpatched Vulnerability : CVE-2022-24785

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates. A path traversal vulnerability impacts npm server users of...

Linux Distros Unpatched Vulnerability : CVE-2024-26990

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Write-protect L2 SPTEs in TDP MMU when clearing dirty status Check...

Linux Distros Unpatched Vulnerability : CVE-2023-23529

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A type confusion issue was addressed with improved checks. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.3.1 and iPadOS 16.3.1, macOS Ventura...

Linux Distros Unpatched Vulnerability : CVE-2023-0358

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use After Free in GitHub repository gpac/gpac prior to 2.3.0-DEV. CVE-2023-0358 Note that Nessus relies on the presence of the package as reported by the vendor...

Linux Distros Unpatched Vulnerability : CVE-2022-49314

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tty: Fix a possible resource leak in icomprobe When pcireadconfigdword failed, call pcireleaseregions and pcidisabledevice to recycle the resource previously...

Linux Distros Unpatched Vulnerability : CVE-2021-3746

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the libtpms code that may cause access beyond the boundary of internal buffers. The vulnerability is triggered by specially-crafted TPM2...

Linux Distros Unpatched Vulnerability : CVE-2021-32823

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the bindata RubyGem before version 2.4.10 there is a potential denial-of-service vulnerability. In affected versions it is very slow for certain classes in...

Linux Distros Unpatched Vulnerability : CVE-2022-48790

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme: fix a possible use-after-free in controller reset during load Unlike .queuerq, in .submitasyncevent drivers may not check the ctrl readiness for AER...