MGASA-2025-0205 Updated golang packages fix security vulnerabilities

Various uses of the Go toolchain in untrusted VCS repositories can result in unexpected code execution. When using the Go toolchain in directories fetched using various VCS tools such as directly cloning Git or Mercurial repositories can cause the toolchain to execute unexpected commands, if said...

CVE-2025-52985

CVE-2025-52985 describes a Use of Incorrect Operator vulnerability in the Routing Engine firewall of Juniper Networks Junos OS Evolved. When a firewall filter applied to the lo0 or re:mgmt interface references a prefix list and that list contains more than 10 entries, the prefix list may fail to ...

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup bsc1237913. CVE-2024-58053: rxrpc: Fix handling of received connection abort bsc1238982...

CVE-2025-6838

creationtimestamp| type| source ---|---|--- 2025-07-11 10:14:25+00:00| seen| https://bsky.app/profile/potato.software/post/3ltomdlapvz2t...

CVE-2025-5241 Denial-of-Service Vulnerability in MELSEC iQ-F Series

Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series allows a remote unauthenticated attacker to lockout legitimate users for a certain period by repeatedly attempting to login with incorrect passwords. The legitimate users will be unabl...

OPENSUSE-SU-2025:15339-1 liboqs-devel-0.14.0-1.1 on GA media

These are all security issues fixed in the liboqs-devel-0.14.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15336-1 cmctl-2.3.0-1.1 on GA media

These are all security issues fixed in the cmctl-2.3.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15341-1 trivy-0.64.1-1.1 on GA media

These are all security issues fixed in the trivy-0.64.1-1.1 package on the GA media of openSUSE Tumbleweed...

AlmaLinux 8 : kernel (ALSA-2025:10669)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:10669 advisory. kernel: Bluetooth: Fix use after free in hcisendacl CVE-2022-49111 kernel: Bluetooth: hcisync: Fix queuing commands when HCIUNREGISTER is set...

Fedora 42 : thunderbird (2025-c0d9be4e68)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-c0d9be4e68 advisory. Update to 128.12.0 https://www.thunderbird.net/en-US/thunderbird/128.12.0esr/releasenotes/...

Unspecified vulnerability in Huawei HarmonyOS (CNVD-2025-15520)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS version 5.1.0, which stems from a null pointer dereference in the Application Exit Reason module, and can...

OPENSUSE-SU-2025:15340-1 php8-8.4.10-1.1 on GA media

These are all security issues fixed in the php8-8.4.10-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15335-1 afterburn-5.8.2-3.1 on GA media

These are all security issues fixed in the afterburn-5.8.2-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15338-1 k9s-0.50.7-2.1 on GA media

These are all security issues fixed in the k9s-0.50.7-2.1 package on the GA media of openSUSE Tumbleweed...

FreeBSD : Apache Tomcat -- Multiple Vulnerabilities (ef87346f-5dd0-11f0-beb2-ac5afc632ba3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the ef87346f-5dd0-11f0-beb2-ac5afc632ba3 advisory. [email protected] reports: A race condition on connection close could trigger a JVM crash wh...

PT-2025-29217 · WordPress · Wpgym - Wordpress Gym Management System

Name of the Vulnerable Software and Affected Versions: WPGYM - Wordpress Gym Management System plugin versions prior to 67.8.0 Description: The WPGYM - Wordpress Gym Management System plugin for WordPress is susceptible to SQL Injection due to insufficient input validation and query preparation...

OPENSUSE-SU-2025:15342-1 xen-4.20.1_02-1.1 on GA media

These are all security issues fixed in the xen-4.20.102-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-53630

An integer overflow flaw was found in llama.cpp. This flaw exists in the ggufinitfromfileimpl function in ggml/src/gguf.cpp and can lead to heap out-of-bounds read/write. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Produc...

USN-7626-3 git regression

USN-7626-1 fixed vulnerabilities in Git. The updates for CVE-2025-27613 and CVE-2025-46835 caused Gitk and Git GUI to not work properly on Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS, and were disabled in USN-7626-2. The problematic updates for the aforementioned CV...

CVE-2025-53709 Access control issues impacting secure-upload service

Secure-upload is a data submission service that validates single-use tokens when accepting submissions to channels. The service only installed on a small number of environments. Under specific circumstances, privileged users of secure-upload could have selected email templates not necessarily...