USN-7387-2: Linux kernel (FIPS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; - Supe...

MAL-2025-2911 Malicious code in vistar-ad-clienttestadv67 (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-12619

An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1, allowing internal users to gain unauthorized access to internal projects...

CVE-2024-10307

An issue has been discovered in GitLab EE/CE affecting all versions from 12.10 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1. A maliciously crafted file can cause uncontrolled CPU consumption when viewing the associated merge request...

OPENSUSE-SU-2025:14937-1 govulncheck-vulndb-0.0.20250327T184518-1.1 on GA media

These are all security issues fixed in the govulncheck-vulndb-0.0.20250327T184518-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14936-1 ffmpeg-4-4.4.5-9.1 on GA media

These are all security issues fixed in the ffmpeg-4-4.4.5-9.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14938-1 istioctl-1.25.1-1.1 on GA media

These are all security issues fixed in the istioctl-1.25.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14939-1 matrix-synapse-1.127.1-1.1 on GA media

These are all security issues fixed in the matrix-synapse-1.127.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14940-1 podman-5.4.1-3.1 on GA media

These are all security issues fixed in the podman-5.4.1-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14934-1 389-ds-3.1.2~git55.7fbd4526-1.1 on GA media

These are all security issues fixed in the 389-ds-3.1.2git55.7fbd4526-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14942-1 rke2-1.29-1.29.15+rke2r1-1.1 on GA media

These are all security issues fixed in the rke2-1.29-1.29.15+rke2r1-1.1 package on the GA media of openSUSE Tumbleweed...

Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel vulnerabilities (USN-7383-1)

"The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7383-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

Fedora 40 : libssh2 (2025-aaa849ae74)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-aaa849ae74 advisory. This update, to the current upstream libssh2 release, addresses a couple of security issues: CVE-2023-6918 missing checks for return values for...

OPENSUSE-SU-2025:14941-1 rke2-1.32.3+rke2r1-1.1 on GA media

These are all security issues fixed in the rke2-1.32.3+rke2r1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14935-1 exim-4.98.2-1.1 on GA media

These are all security issues fixed in the exim-4.98.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14944-1 rke2-1.31-1.31.7+rke2r1-1.1 on GA media

These are all security issues fixed in the rke2-1.31-1.31.7+rke2r1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14943-1 rke2-1.30-1.30.11+rke2r1-1.1 on GA media

These are all security issues fixed in the rke2-1.30-1.30.11+rke2r1-1.1 package on the GA media of openSUSE Tumbleweed...

USN-7388-1: Linux kernel vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service system crash or possibly execute arbitrary code...

CVE-2025-26874 WordPress MemberSpace plugin <= 2.1.13 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in memberspace MemberSpace memberspace allows Reflected XSS.This issue affects MemberSpace: from n/a through = 2.1.13...

USN-7383-2: Linux kernel (Real-time) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Drivers core; - Ublk userspace block driver; -...