Amazon Linux 2023 : amazon-ssm-agent (ALAS2023-2025-1359)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1359 advisory. Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation. This only affected certificate chains which contain policy graphs, which a...

Security update for squid

This update for squid fixes the following issues: CVE-2025-62168: Fixed proxy auth data visible to scripts bsc1252281. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command list...

EUVD-2005-0195

Malware in sbrugna...

EUVD-2017-9474

Malware in sbrugna...

EUVD-2015-1370

Malware in sbrugna...

EUVD-2005-0148

Malware in sbrugna...

EUVD-2012-0371

Malware in sbrugna...

EUVD-2002-0707

Malware in sbrugna...

EUVD-1999-1258

Malware in sbrugna...

EUVD-2005-4865

Malware in sbrugna...

EUVD-2013-2449

Malware in sbrugna...

EUVD-2020-1357

Malware in sbrugna...

EUVD-2016-5628

Malware in sbrugna...

EUVD-2010-4456

Malware in sbrugna...

EUVD-2016-6084

Malware in sbrugna...

EUVD-2024-53001

Malicious code in bioql PyPI...

EUVD-2024-0479

Malicious code in bioql PyPI...

GO-2025-3972 Dragonfly vulnerable to timing attacks against Proxy’s basic authentication in d7y.io/dragonfly

Dragonfly vulnerable to timing attacks against Proxy’s basic authentication in d7y.io/dragonfly...

Timing Attack

Overview Affected versions of this package are vulnerable to Timing Attack via the Proxy authentication. An attacker can obtain sensitive authentication information by exploiting differences in response times during password validation. Remediation Upgrade d7y.io/dragonfly/v2/client/daemon/proxy ...

Timing Attack

Overview Affected versions of this package are vulnerable to Timing Attack via the Proxy authentication. An attacker can obtain sensitive authentication information by exploiting differences in response times during password validation. Remediation Upgrade...