OPENSUSE-SU-2025:20100-1 Security update for libvirt

This update for libvirt fixes the following issues: - CVE-2025-13193: Fixed Information disclosure via world-readable VM snapshots bsc1253703 - CVE-2025-12748: Fixed Denial of service in XML parsing bsc1253278 Other fixes: - spec: Adjust dbus dependency bsc1253642 - qemu: Add support for Intel TD...

EUVD-2024-24655

Malicious code in bioql PyPI...

EUVD-2024-37884

Malicious code in bioql PyPI...

EUVD-2022-44972

Malicious code in bioql PyPI...

EUVD-2024-19413

Malicious code in bioql PyPI...

EUVD-2024-19461

Malicious code in bioql PyPI...

EUVD-2023-50034

Malicious code in bioql PyPI...

EUVD-2023-26785

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2023-47855

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in some IntelR TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of...

SUSE CVE-2025-22889

Improper handling of overlap between protected memory ranges for some IntelR XeonR 6 processor with IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

ALPINE-CVE-2025-22889

Improper handling of overlap between protected memory ranges for some IntelR XeonR 6 processor with IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-33607

Out-of-bounds read in some IntelR TDX module software before version TDX1.5.07.00.774 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2025-21096

Improper buffer restrictions in the firmware for some IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2025-32862 · Intel · Intel Tdx Module

Name of the Vulnerable Software and Affected Versions: IntelR TDX Module firmware versions prior to 1.5.13 Description: Improper locking in some IntelR TDX Module firmware versions may allow a privileged user to potentially escalate privileges via local access. Recommendations: Update to IntelR T...

Intel TDX Module software 缓冲区错误漏洞

Intel TDX Module software is a collection of software modules from Intel Corporation USA. A buffer error vulnerability exists in versions of Intel TDX module software prior to TDX1.5.07.00.774, which originates from an out-of-bounds read and could lead to information disclosure...

PT-2025-32706 · Intel · Intel Tdx Firmware

Name of the Vulnerable Software and Affected Versions: IntelR TDX firmware affected versions not specified Description: A predictable seed in the Pseudo-Random Number Generator PRNG within the firmware may allow an authenticated user to potentially enable information disclosure via local access...

Intel TDX 安全漏洞

Intel TDX is a CPU-level technology from Intel Corporation USA. It is used to implement a trusted execution environment. A security vulnerability exists in Intel TDX that stems from the predictability of the pseudo-random number generator seed, which could lead to information disclosure...

HPESBHF04913 rev.1 - Certain HPE ProLiant DL/ML, Synergy, Alletra, and Edgeline Servers Using Certain Intel Processors, INTEL-SA-01245, 2025.2 IPU - Intel TDX Module Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra 4110 - Prior to 2.5004-22-2025 HPE Alletra 4120 - Prior to 2.5004-22-2025 HPE Alletra 4140 - Prior to 2.5004-22-2025 HPE ProLiant DL110 Gen11 - Prior to...

CVE-2024-27457

Improper check for unusual or exceptional conditions in IntelR TDX Module firmware before version 1.5.06 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2024-21850

Sensitive information in resource not removed before reuse in some IntelR TDX Seamldr module software before version 1.5.02.00 may allow a privileged user to potentially enable escalation of privilege via local access...