Ubuntu 22.04 LTS / 24.04 LTS / 24.10 : HAProxy vulnerability (USN-7431-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7431-1 advisory. Aleandro Prudenzano and Edoardo Geraci discovered that HAProxy incorrectly handled certain uncommon configurations that replace multiple short...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : libsoup vulnerabilities (USN-7432-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7432-1 advisory. It was discovered that libsoup could be made to read out of bounds. An attacker could possibly use this issue to cause...

USN-7430-1: Dino vulnerability

Kim Alvefur discovered that Dino did not correctly sanitize certain messages. A remote attacker could possibly use this issue to leak sensitive information...

USN-7346-3: OpenSC vulnerabilities

USN-7346-1 fixed vulnerabilities in OpenSC. The update introduced a regression which broke smartcard based authentication. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that OpenSC did not correctly handle certain memory operations...

[SECURITY] [DLA 4122-1] libbssolv-perl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4122-1 [email protected] https://www.debian.org/lts/security/ Andrej Shadura April 09, 2025 https://wiki.debian.org/LTS -...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-7428-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7428-1 advisory. Demi Marie Obenour and Simon Gaiser discovered that several Xen para- virtualization device frontends did not properly restrict t...

[SECURITY] [DLA 4118-1] ghostscript security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4118-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk April 07, 2025 https://wiki.debian.org/LTS -...

USN-7402-4: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Block layer subsystem; - GPU drivers; - HID subsystem; - Media drivers; - JFS file system; - Network namespace; -...

USN-7418-1: Ruby vulnerabilities

It was discovered that Ruby incorrectly handled parsing of an XML document that has specific XML characters in an attribute value using REXML gem. An attacker could use this issue to cause Ruby to crash, resulting in a denial of service. This issue only affected in Ubuntu 22.04 LTS, Ubuntu 24.04...

Ubuntu 22.04 LTS : Linux kernel (Azure) vulnerabilities (USN-7420-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7420-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

[SECURITY] [DLA 4117-1] atop security update

Debian LTS Advisory DLA-4117-1 [email protected] https://www.debian.org/lts/security/ Carlos Henrique Lima Melara April 06, 2025 https://wiki.debian.org/LTS Package : atop Version : 2.6.0-2+deb11u1 CVE ID : CVE-2025-31160 It was discovered that Atop, a monitor tool for system resources...

[SECURITY] [DLA 4116-1] abseil security update

Debian LTS Advisory DLA-4116-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost April 05, 2025 https://wiki.debian.org/LTS Package : abseil Version : 020200923.3-2+deb11u1 CVE ID : CVE-2025-0838 Debian Bug : 1098903 A vulnerability has been found in abseil, a collecti...

[SECURITY] [DLA 4106-2] jetty9 regression update

Debian LTS Advisory DLA-4106-2 [email protected] https://www.debian.org/lts/security/ Markus Koschany April 05, 2025 https://wiki.debian.org/LTS Package : jetty9 Version : 9.4.57-0+deb11u2 The security update DLA-4106-1 for jetty9 incorrectly required an unavailable dependency on...

Ubuntu: Security Advisory (USN-7406-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-7411-1: OpenVPN vulnerability

It was discovered that OpenVPN incorrectly handled certain malformed packets. A remote attacker could possibly use this issue to cause OpenVPN to crash, resulting in a denial of service...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : GnuPG vulnerability (USN-7412-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7412-1 advisory. It was discovered that GnuPG incorrectly handled importing keys with certain crafted subkey data. If a user or automated system we...

Ubuntu 20.04 LTS : Linux kernel (IoT) vulnerabilities (USN-7413-1)

"The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7413-1 advisory. Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer...

[SECURITY] [DLA 4110-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4110-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort April 02, 2025 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 4109-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4109-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort April 02, 2025 https://wiki.debian.org/LTS -...

MAL-2025-3070 Malicious code in lts-patterns (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9515ccf1dbf9bcc711f506a3486fec43d113f034edba89f13a9d0057297d5ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...