[SECURITY] [DLA 4320-1] u-boot security update

Debian LTS Advisory DLA-4320-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert October 01, 2025 https://wiki.debian.org/LTS Package : u-boot Version : 2021.01+dfsg-5+deb11u2 CVE ID : CVE-2021-27097 CVE-2021-27138 Debian Bug : 983269 983270 Multiple vulnerabilties...

Debian dla-4314 : internetarchive - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4314 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4314-1 [email protected] https://www.debian.org/lts/security/...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS : Qt vulnerabilities (USN-7780-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7780-1 advisory. It was discovered that Qt did not correctly handle certain inputs when using the SQL ODBC driver plugin. An attacker...

Debian dla-4313 : node-tar-fs - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4313 advisory. [email protected] Subject: SECURITY DLA 4313-1 node-tar-fs security update - ------------------------------------------------------------------------- Debian...

[SECURITY] [DLA 4312-1] squid security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4312-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès September 27, 2025 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 4311-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4311-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort September 26, 2025 https://wiki.debian.org/LTS -...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 : Gnuplot vulnerabilities (USN-7773-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7773-1 advisory. ChenYiFan Liu discovered that Gnuplot did not correctly handle certain memory...

Ubuntu 20.04 LTS : Linux kernel (Oracle) vulnerabilities (USN-7776-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7776-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel vulnerabilities (USN-7764-1)

"The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7764-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

Ubuntu 24.04 LTS : Linux kernel (OEM) vulnerabilities (USN-7771-1)

"The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7771-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws i...

Debian dla-4309 : libxslt1-dev - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4309 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4309-1 [email protected]...

Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel (NVIDIA) vulnerabilities (USN-7765-1)

"The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7765-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

USN-7762-1: pip vulnerabilities

Dennis Brinkrolf and Tobias Funke discovered that Requests incorrectly leaked Proxy-Authorization headers. A remote attacker could possibly use this issue to obtain sensitive information. This update addresses the issue in the Requests module bundled into pip in Ubuntu 22.04 LTS. CVE-2023-32681 I...

[SECURITY] [DLA 4307-1] jq security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4307-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz September 21, 2025 https://wiki.debian.org/LTS -...

Debian dla-4307 : jq - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4307 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4307-1 [email protected] https://www.debian.org/lts/security/...

Debian dla-4305 : firefox-esr - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4305 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4305-1 [email protected]...

Debian dla-4304 : libcjson-dev - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4304 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4304-1 [email protected] https://www.debian.org/lts/security/...

CVE-2025-59475

CVE-2025-59475 concerns Jenkins 2.527 and earlier, and LTS 2.516.2 and earlier, where a missing permission check in the authenticated user profile dropdown menu allows attackers without Overall/Read permission to obtain limited information about the Jenkins configuration by listing available opti...

PT-2025-38151

Name of the Vulnerable Software and Affected Versions Jenkins versions 2.527 and earlier Jenkins LTS versions 2.516.2 and earlier Description Jenkins does not perform a permission check in the sidepanel of a page accessible to users lacking Overall/Read permission. This allows attackers without...

Malicious code in gtts-lts (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7cfb789704a149f7b741d0c68fcb8a32a1e189444ca36f97e435e59d04e073b8 During the execution, the package silently download and runs a JAR not related to the package job. At the time of analysis, the content was corrupted ---...