Security update for etcd (important)

openSUSE Security Update: Security update for etcd Announcement ID: openSUSE-SU-2025:0003-1 Rating: important References: 1174951 1181400 1183703 1199031 Cross-References: CVE-2019-11254 CVE-2020-15106 CVE-2021-28235 CVE-2023-47108 CVE-2023-48795 CVSS scores: CVE-2019-11254 SUSE: 4.3...

Important: Red Hat Security Advisory: bind and bind-dyndb-ldap security update

An update for bind and bind-dyndb-ldap is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

PT-2026-4771

Name of the Vulnerable Software and Affected Versions eslint versions prior to 9.26.0 Description A stack overflow issue exists in eslint when serializing objects containing circular references within the eslint/lib/shared/serialization.js file. The issue is triggered through the RuleTester.run...

PT-2025-54204

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-12 Description ImageMagick, software used for editing and manipulating digital images, contains a flaw where it does not properly check for circular references between two MVGs. This can lead to a stack...

CVE-2024-39727

IBM Engineering Lifecycle Optimization - Engineering Insights 7.0.2 and 7.0.3 uses a web link with untrusted references to an external site. A remote attacker could exploit this vulnerability to expose sensitive information or perform unauthorized actions on the victims’ web browser...

Amazon Linux 2 : ghostscript (ALAS-2024-2708)

The version of ghostscript installed on the remote host is prior to 9.54.0-9. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2708 advisory. PS interpreter - check the type of the Pattern Implementation NOTE:...

eSigna eSignaViewer 安全漏洞

eSigna eSignaViewer is a visualization component from eSigna, Inc. A security vulnerability exists in eSigna eSignaViewer versions 1.0 through 1.5, which stems from the presence of path traversal and insecure direct object references, allowing an attacker to access arbitrary files in the document...

RLSA-2024:10831 Important: postgresql:16 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID CVE-2024-10978 postgresql: PostgreSQL PL/Perl environment variable changes execute arbitrary code CVE-2024-10979 postgresq...

perl-App-cpanminus:1.7044 security update

An update is available for module.perl-CPAN-DistnameInfo, module.perl-Parse-PMFile, perl-String-ShellQuote, perl-App-cpanminus, perl-File-pushd, module.perl-File-pushd, module.perl-String-ShellQuote, perl-Parse-PMFile, module.perl-App-cpanminus, perl-CPAN-DistnameInfo, module.perl-CPAN-Meta-Check...

kernel: gro: fix ownership transfer

A flaw was found in the Linux kernel's Generic Receive Offload GRO feature, where packets processed with a fragment list are not properly orphaned due to incorrect handling of socket references. This vulnerability can cause system instability or kernel bugs. The issue has been fixed by making sur...

govulncheck-vulndb-0.0.20241213T205935-1.1 on GA media (moderate)

govulncheck-vulndb-0.0.20241213T205935-1.1 on GA media Announcement ID: openSUSE-SU-2024:14599-1 Rating: moderate Cross-References: CVE-2020-10696 CVE-2020-8912 CVE-2022-31668 CVE-2023-26248 CVE-2023-3676 CVE-2023-3955 CVE-2024-12401 CVE-2024-37032 CVE-2024-44337 CVE-2024-45039 CVE-2024-45337...

RHEL 9 : kernel (RHSA-2024:11486)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:11486 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Bluetooth: l2cap: fix...

Moderate: Red Hat Security Advisory: containernetworking-plugins security update

An update for containernetworking-plugins is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Moderate: Red Hat Security Advisory: edk2 security update

An update for edk2 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this update as havi...

CVE-2024-12372

creationtimestamp| type| source ---|---|--- 2024-12-17 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-352-03 2024-12-18 15:32:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113674546679601749 2024-12-18 17:52:39+00:00| seen| https://t.me/cvedetector/132...

MozillaFirefox-133.0.3-1.1 on GA media (moderate)

MozillaFirefox-133.0.3-1.1 on GA media Announcement ID: openSUSE-SU-2024:14583-1 Rating: moderate Cross-References: CVE-2024-11691 CVE-2024-11692 CVE-2024-11693 CVE-2024-11694 CVE-2024-11695 CVE-2024-11696 CVE-2024-11697 CVE-2024-11698 CVE-2024-11699 CVE-2024-11700 CVE-2024-11701 CVE-2024-11702...

CVE-2024-53376

creationtimestamp| type| source ---|---|--- 2024-12-15 22:45:16+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9438 2024-12-16 03:32:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113660390988031437 2024-12-16 05:38:05+00:00| seen| https://t.me/cvedetector/12957...

CVE-2024-55956

creationtimestamp| type| source ---|---|--- 2024-12-13 21:21:03+00:00| seen| https://infosec.exchange/users/catc0n/statuses/113647607008214402 2024-12-13 23:18:15+00:00| seen| https://t.me/cvedetector/12902 2024-12-15 10:09:25+00:00| seen|...

RHEL 9 : python3.12 (RHSA-2024:11035)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:11035 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

rexml: REXML ReDoS vulnerability

A flaw was found in the ReXML XML toolkit for Ruby. Parsing XML data containing a large number of digits between & and x...; in a hex numeric character reference &x...; can trigger a regular expression denial of service ReDoS condition, leading to a denial of service...