February 11, 2025—KB5052038 (Monthly Rollup)

None None...

February 11, 2025—KB5052032 (Security-only update)

None None...

February 11, 2025—KB5052072 (Security-only update)

None None...

February 11, 2025—KB5052016 (Monthly Rollup)

None None...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: drm/amd/display: Check null-initialized variables WHAT & HOW drrtiming and subvppipe are initialized to null, and they are not always assigned new values. It is necessary to check for null before dereferencing these variables...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: drm/amd/display: Check BIOS images before they are used. BIOS images may fail to load, and null checks are added before they are used. This fix addresses 6 NULLRETURNS issues reported by Coverity...

CVE-2025-1211

Versions of the package hackney before 1.21.0 are vulnerable to Server-side Request Forgery SSRF due to improper parsing of URLs by URI built-in module and hackey. Given the URL http://[email protected]/, the URI function will parse and see the host as 127.0.0.1 which is correct, and hackney...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

CVE-2025-25243

creationtimestamp| type| source ---|---|--- 2025-02-11 01:16:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhuidjjek42i 2025-02-11 01:56:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113982765819276646 2025-02-11 02:48:14+00:00| seen|...

USN-7263-1 firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. CVE-2025-1011, CVE-2025-1013,...

USN-7263-1: Firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. CVE-2025-1011, CVE-2025-1013,...

CVE-2025-24875

CVE-2025-24875 corresponds to SAP Commerce where the Backoffice authentication cookies are by default configured with SameSite=None. Root cause: cookies set to None, weakening CSRF protections. Impact: CSRF risk with potential confidentiality/integrity concerns; exploitation status not detailed i...

PT-2025-6690

Name of the Vulnerable Software and Affected Versions grub2 affected versions not specified Description A defect was found in grub2. When reading a symbolic link's name from a UFS filesystem, grub2 fails to validate the string length taken as an input. This lack of validation may lead to a heap...

Hotfix XS82ECU1082 - For Citrix Hypervisor 8.2 Cumulative Update 1

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2 Cumulative Update 1 and is only available to customers on theCustomer Success Servicesprogram. Note: Citrix Hypervisor 8.2 Cumulative Update 1 reaches end of life on Jun 25, 2025. Upgrade toXenServer...

Adobe Illustrator < 28.7.4 / 29.0.0 < 29.2.1 Multiple Arbitrary code execution (APSB25-11) (macOS)

The version of Adobe Illustrator installed on the remote macOS host is prior to 28.7.4, 29.2.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-11 advisory. - Stack-based Buffer Overflow CWE-121 potentially leading to Arbitrary code execution CVE-2025-21163 - Us...

OPENSUSE-SU-2025:14764-1 libmozjs-128-0-128.7.0-1.1 on GA media

These are all security issues fixed in the libmozjs-128-0-128.7.0-1.1 package on the GA media of openSUSE Tumbleweed...

RHEL 9 : thunderbird (RHSA-2025:1317)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:1317 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Memory safety bugs fixed in Firefox 135...

OPENSUSE-SU-2025:14766-1 libngtcp2-16-1.10.0-1.1 on GA media

These are all security issues fixed in the libngtcp2-16-1.10.0-1.1 package on the GA media of openSUSE Tumbleweed...

DLA-4018-2 ruby2.7 - regression update

Bulletin has no description...

FreeBSD : mozilla -- multiple vulnerabilities (e54a1413-e539-11ef-a845-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the e54a1413-e539-11ef-a845-b42e991fc52e advisory. [email protected] reports: An attacker could have caused a use-after-free via crafted XSLT...