php -- Multiple vulnerabilities

php.net reports: CVE-2025-1735: pgsql extension does not check for errors during escaping CVE-2025-6491: NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-1220: Null byte termination in hostnames...

OPENSUSE-SU-2025:14844-1 bsdtar-3.7.7-2.1 on GA media

These are all security issues fixed in the bsdtar-3.7.7-2.1 package on the GA media of openSUSE Tumbleweed...

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-7289-4)

"The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7289-4 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-7294-2)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7294-2 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

OPENSUSE-SU-2025:14843-1 govulncheck-vulndb-0.0.20250226T025151-1.1 on GA media

These are all security issues fixed in the govulncheck-vulndb-0.0.20250226T025151-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14845-1 python311-jupyter-server-2.14.2-3.1 on GA media

These are all security issues fixed in the python311-jupyter-server-2.14.2-3.1 package on the GA media of openSUSE Tumbleweed...

CVE-2022-49452

In the Linux kernel, the following vulnerability has been resolved: dpaa2-eth: retrieve the virtual address before dmaunmap The TSO header was DMA unmapped before the virtual address was retrieved and then used to free the buffer. This meant that we were actually removing the DMA map and then...

USN-7291-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - x86 architecture; - Block layer subsystem; - ACPI drivers; - GPU drivers; - HID subsystem; -...

USN-7293-1: Linux kernel vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service system crash or possibly execute arbitrary code...

USN-7304-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACPI drivers; - Drivers cor...

Important: Red Hat Security Advisory: RHODF-4.15-RHEL-9 security update

An updated images are now available for RHODF-4.15-RHEL-9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links...

OPENSUSE-SU-2025:14841-1 xorg-x11-server-21.1.15-2.1 on GA media

These are all security issues fixed in the xorg-x11-server-21.1.15-2.1 package on the GA media of openSUSE Tumbleweed...

Amazon Linux 2 : kernel (ALASKERNEL-5.15-2025-063)

The version of kernel installed on the remote host is prior to 5.15.178-120.178. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2025-063 advisory. Integer Overflow or Wraparound vulnerability in Linux kernel on x86 and ARM md, raid, raid5 modules allo...

OPENSUSE-SU-2025:14842-1 xwayland-24.1.5-2.1 on GA media

These are all security issues fixed in the xwayland-24.1.5-2.1 package on the GA media of openSUSE Tumbleweed...

Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel vulnerabilities (USN-7303-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7303-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

OPENSUSE-SU-2025:14837-1 libX11-6-1.8.11-2.1 on GA media

These are all security issues fixed in the libX11-6-1.8.11-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14838-1 libxkbfile-devel-1.1.3-2.1 on GA media

These are all security issues fixed in the libxkbfile-devel-1.1.3-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14840-1 trivy-0.59.1-1.1 on GA media

These are all security issues fixed in the trivy-0.59.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14839-1 teleport-17.2.9-1.1 on GA media

These are all security issues fixed in the teleport-17.2.9-1.1 package on the GA media of openSUSE Tumbleweed...

[slackware-security] tigervnc

New tigervnc packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: extra/tigervnc/tigervnc-1.12.0-i586-8slack15.0.txz: Rebuilt. Recompiled against xorg-server-1.20.14, including patches for security issues:...