PT-2025-37852

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Tahoe 26 Description: An out-of-bounds read issue existed due to insufficient bounds checking. This could allow a malicious application to disclose coprocessor memory. Recommendations: Update to macOS Tahoe 26 or later...

PT-2025-37764

Name of the Vulnerable Software and Affected Versions: FreePBX versions 15.0.0 through 15.0.37 FreePBX versions 16.0.0 through 16.0.40 FreePBX versions 17.0.0 through 17.0.20 Description: FreePBX is a web-based graphical user interface. Malicious connections to the Administrator Control Panel web...

PT-2025-37800

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Tahoe 26 Description: The issue involves improved memory handling. Processing a maliciously crafted image may corrupt process memory. Recommendations: Update to macOS Tahoe 26...

PT-2025-37790

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Tahoe 26 Description: An application may be able to access user-sensitive data due to improved entitlements. Recommendations: Update to macOS Tahoe 26...

kernel-devel-6.16.7-1.1 on GA media (moderate)

kernel-devel-6.16.7-1.1 on GA media Announcement ID: openSUSE-SU-2025:15553-1 Rating: moderate Cross-References: CVE-2025-40300 CVSS scores: CVE-2025-40300 SUSE : 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N CVE-2025-40300 SUSE : 8.2...

cargo-packaging-1.3.0+0-2.1 on GA media (moderate)

cargo-packaging-1.3.0+0-2.1 on GA media Announcement ID: openSUSE-SU-2025:15552-1 Rating: moderate Cross-References: CVE-2025-58160 CVSS scores: CVE-2025-58160 SUSE : 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N CVE-2025-58160 SUSE : 2.3...

[slackware-security] kernel

New kernel packages are available for Slackware 15.0 to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/kernel-firmware-20250912f0f4634-noarch-1.txz: Upgraded. patches/packages/linux-5.15.193/kernel-generic-5.15.193-i586-1.txz: Upgraded...

DEBIAN-CVE-2025-39795

In the Linux kernel, the following vulnerability has been resolved: block: avoid possible overflow for chunksectors check in blkstacklimits In blkstacklimits, we check that the t-chunksectors value is a multiple of the t-physicalblocksize value. However, by finding the chunksectors value in bytes...

CVE-2025-39795

In the Linux kernel, the following vulnerability has been resolved: block: avoid possible overflow for chunksectors check in blkstacklimits In blkstacklimits, we check that the t-chunksectors value is a multiple of the t-physicalblocksize value. However, by finding the chunksectors value in bytes...

CLSA-2025-1757691233 libssh: Fix of CVE-2025-5318

CVE-2025-5318: fix out-of-bounds read in sftphandle function...

CVE-2025-59139 Hono has Body Limit Middleware Bypass

Hono is a Web application framework that provides support for any JavaScript runtime. In versions prior to 4.9.7, a flaw in the bodyLimit middleware could allow bypassing the configured request body size limit when conflicting HTTP headers were present. The middleware previously prioritized the...

OESA-2025-2280 kubernetes security update

Container cluster management. Security Fixes: A vulnerability exists in the NodeRestriction admission controller in Kubernetes clusters where node users can delete their corresponding node object by patching themselves with an OwnerReference to a cluster-scoped resource. If the OwnerReference...

OESA-2025-2284 kubernetes security update

Container cluster management. Security Fixes: A vulnerability exists in the NodeRestriction admission controller in Kubernetes clusters where node users can delete their corresponding node object by patching themselves with an OwnerReference to a cluster-scoped resource. If the OwnerReference...

OESA-2025-2288 python3 security update

Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C...

OESA-2025-2255 libxml2 security update

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...

Minor update (10) for Vivaldi Desktop Browser 7.5

Download Vivaldi The following improvements were made since the ninth 7.5 minor update: Chromium Update to 138.0.7204.261 CVE-2025-10200 Main photo byAmerican Heritage Chocolate...

CLSA-2025-1757666692 libtiff: Fix of CVE-2017-9117

CVE-2017-9117: add checks for all BMP reading operations to avoid buffer overflow...

CLSA-2025-1757663410 git: Fix of CVE-2024-50349

CVE-2024-50349: fix ANSI escape sequence vulnerability that occurs when asking for credentials interactively...

AZL-70955 CVE-2025-39762 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: add null check WHY Prevents null pointer dereferences to enhance function robustness HOW Adds early null check and return false if invalid...

CVE-2025-39748

In the Linux kernel, the following vulnerability has been resolved: bpf: Forget ranges when refining tnum after JSET Syzbot reported a kernel warning due to a range invariant violation on the following BPF program. 0: call bpfgetnetnscookie 1: if r0 == 0 goto 2: if r0 & Oxffffffff goto The issue ...