USN-7476-1: Scrapy vulnerabilities

It was discovered that Scrapy improperly exposed HTTP authentication credentials to request targets, including during redirects. An attacker could use this issue to gain unauthorized access to user accounts. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. CVE-2021-41125 It was...

OPENSUSE-SU-2025:15052-1 grafana-11.5.4-1.1 on GA media

These are all security issues fixed in the grafana-11.5.4-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE-SU-2025:1445-1 Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024119 fixes several issues. The following security issues were fixed: - CVE-2024-8805: Bluetooth: hcievent: Align BR/EDR JUSTWORKS paring with LE bsc1240840. - CVE-2024-50205: ALSA: firewire-lib: Avoid division by zero in applyconstrainttosize...

OPENSUSE-SU-2025:15051-1 chromedriver-136.0.7103.59-1.1 on GA media

These are all security issues fixed in the chromedriver-136.0.7103.59-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2023-53095

In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Fix a NULL pointer dereference The LRU mechanism may look up a resource in the process of being removed from an object. The locking rules here are a bit unclear but it looks currently like res-bo assignment is protected ...

CVE-2023-53084

In the Linux kernel, the following vulnerability has been resolved: drm/shmem-helper: Remove another errant put in error path drmgemshmemmmap doesn't own reference in error code path, resulting in the dma-buf shmem GEM object getting prematurely freed leading to a later use-after-free...

CVE-2023-53061

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix possible refcount leak in smb2open Reference count of acls will leak when memory allocation fails. Fix this by adding the missing posixaclrelease...

USN-7475-1: Linux kernel (Xilinx ZynqMP) vulnerabilities

Jann Horn discovered that the watchqueue event notification subsystem in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service system crash or escalate their privileges. CVE-2022-0995 Several security issues were discovered i...

USN-7461-3: Linux kernel (Xilinx ZynqMP) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Network drivers; - File systems infrastructure; - Ext4 file system; - Network file system NFS server...

CVE-2025-1326

creationtimestamp| type| source ---|---|--- 2025-05-02 04:15:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14429 2025-05-02 07:19:04+00:00| seen| https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lo6baa6gafd2 2025-05-02 07:34:43+00:00| seen|...

[SECURITY] [DSA 5914-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5914-1 [email protected] https://www.debian.org/security/ Andres Salomon May 01, 2025 https://www.debian.org/security/faq -...

OPENSUSE-SU-2025:15049-1 tomcat10-10.1.40-1.1 on GA media

These are all security issues fixed in the tomcat10-10.1.40-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-46626

creationtimestamp| type| source ---|---|--- 2025-05-01 22:01:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo5cppglqz2h 2025-05-01 23:12:37+00:00| seen| https://t.me/cvedetector/24269...

GHSA-45V9-W9FH-33J6 vulnerabilities

Vulnerabilities for packages: mattermost-fips...

GHSA-J639-M367-75CF vulnerabilities

Vulnerabilities for packages: mattermost-fips...

GHSA-Q7RX-W656-FWMV vulnerabilities

Vulnerabilities for packages: mattermost-fips...

GHSA-2549-XH72-QRPM vulnerabilities

Vulnerabilities for packages: mattermost-fips...

GHSA-W88V-PJR8-CMV2 vulnerabilities

Vulnerabilities for packages: mattermost-fips...

GHSA-RC42-6C7J-7H5R vulnerabilities

Vulnerabilities for packages: keycloak-config-cli, camunda-zeebe...

SUSE-SU-2025:1416-1 Security update for the Linux Kernel (Live Patch 50 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059182 fixes several issues. The following security issues were fixed: - CVE-2024-50205: ALSA: firewire-lib: Avoid division by zero in applyconstrainttosize bsc1233294. - CVE-2024-56650: netfilter: xtables: fix LED ID check in ledtgcheck bsc1235431...