OPENSUSE-SU-2025:14867-1 amazon-ssm-agent-3.3.1957.0-2.1 on GA media

These are all security issues fixed in the amazon-ssm-agent-3.3.1957.0-2.1 package on the GA media of openSUSE Tumbleweed...

Security Bulletin: Multiple Security Vulnerabilities in Google Guava Affects IBM Sterling B2B Integrator

Summary IBM Sterling B2B Integrator has addressed the security vulnerabilities from Google Guava Vulnerability Details CVEID:CVE-2023-2976 DESCRIPTION: Use of Java's default temporary directory for file creation in FileBackedOutputStream in Google Guava versions 1.0 to 31.1 on Unix systems and...

[SECURITY] [DLA 4081-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4081-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort March 10, 2025 https://wiki.debian.org/LTS -...

Linux Distros Unpatched Vulnerability : CVE-2024-50241

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFSD: Initialize struct nfsd4copy earlier Ensure the refcount and asynccopies fields are initialized early. cleanupasynccopy will reference these fields if an...

OPENSUSE-SU-2025:14864-1 gerbera-2.5.0-1.1 on GA media

These are all security issues fixed in the gerbera-2.5.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14865-1 grafana-11.5.2-1.1 on GA media

These are all security issues fixed in the grafana-11.5.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14861-1 MozillaFirefox-136.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-136.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14862-1 less-668-2.1 on GA media

These are all security issues fixed in the less-668-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14863-1 teleport-17.3.3-1.1 on GA media

These are all security issues fixed in the teleport-17.3.3-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-P3FP-8748-VQFQ vulnerabilities

Vulnerabilities for packages: awx...

CVE-2025-21827

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Add locks for usbdriverclaiminterface The documentation for usbdriverclaiminterface says that "the device lock" is needed when the function is called from places other than probe. This appears to be th...

USN-7323-2: Linux kernel vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service system crash or possibly execute arbitrary code...

CVE-2025-1540

An issue has been discovered in GitLab CE/EE for Self-Managed and Dedicated instances affecting all versions from 17.5 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2. It was possible for a user added as an External to read and clone internal projects under certain circumstances."...

OPENSUSE-SU-2025:14860-1 xen-4.20.0_08-4.1 on GA media

These are all security issues fixed in the xen-4.20.008-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14859-1 ruby3.4-rubygem-rack-2.2-2.2.12-1.1 on GA media

These are all security issues fixed in the ruby3.4-rubygem-rack-2.2-2.2.12-1.1 package on the GA media of openSUSE Tumbleweed...

Linux Distros Unpatched Vulnerability : CVE-2025-21796

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: clear aclaccess/acldefault after releasing them If getting acldefault fails, aclaccess and acldefault will be released simultaneously. However, aclaccess...

Linux Distros Unpatched Vulnerability : CVE-2024-49988

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: add refcnt to ksmbdconn struct When sending an oplock break request, opinfo-conn is used, But freed -conn can be used on multichannel. This patch add a...

Linux Distros Unpatched Vulnerability : CVE-2024-50164

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix overloading of MEMUNINIT's meaning Lonial reported an issue in the BPF verifier where checkmemsizereg has the following code: if !tnumisconstreg-varoff...

Ubuntu 14.04 LTS / 16.04 LTS : Linux kernel vulnerabilities (USN-7332-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7332-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

Linux Distros Unpatched Vulnerability : CVE-2024-50067

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - uprobe: avoid out-of-bounds memory access of fetching args Uprobe needs to fetch args into a percpu buffer, and then copy to ring buffer to avoid non-atomic...