SUSE-SU-2025:01610-1 Security update for the Linux Kernel (Live Patch 45 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059164 fixes several issues. The following security issues were fixed: - CVE-2024-53156: wifi: ath9k: add range check for connrspepid in htcconnectservice bsc1234847. - CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage bsc1229504. -...

CVE-2025-37936

No description is available for this CVE...

GHSA-CXRH-J4JR-QWG3 vulnerabilities

Vulnerabilities for packages: code-server...

firefox-esr-128.10.1-1.1 on GA media (moderate)

firefox-esr-128.10.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:15133-1 Rating: moderate Cross-References: CVE-2025-4918 CVE-2025-4919 CVSS scores: CVE-2025-4918 SUSE : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2025-4918 SUSE : 8.7...

MozillaThunderbird-128.10.1-1.1 on GA media (moderate)

MozillaThunderbird-128.10.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:15131-1 Rating: moderate Cross-References: CVE-2025-3875 CVE-2025-3877 CVE-2025-3909 CVE-2025-3932 Affected Products: openSUSE Tumbleweed An update that solves 4 vulnerabilities can now be installed. Description: These...

govulncheck-vulndb-0.0.20250515T200012-1.1 on GA media (moderate)

govulncheck-vulndb-0.0.20250515T200012-1.1 on GA media Announcement ID: openSUSE-SU-2025:15135-1 Rating: moderate Cross-References: CVE-2024-52290 CVE-2024-8063 CVE-2025-3757 CVE-2025-3931 CVE-2025-4432 CVE-2025-46331 CVE-2025-4658 CVE-2025-46721 CVE-2025-46735 CVE-2025-46815 CVE-2025-46816...

RHEL 8 : kernel-rt (RHSA-2025:8057)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:8057 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

ALSA-2025:8056 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net/mlx5: Always stop health timer during driver removal CVE-2024-40906 kernel: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink CVE-2024-44970 kernel: vsock: Keep the binding until...

RHEL 8 / 9 : Red Hat Ceph Storage 6.1 update (Important) (RHSA-2025:4238)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:4238 advisory. Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage...

Ubuntu: Security Advisory (USN-7515-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-7516-3 linux-azure, linux-kvm vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - Block layer subsystem; - Drivers core; - Network block device driver;...

USN-7511-3 linux-gke vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Network block device...

USN-7510-3: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Network block device...

USN-7519-1 mariadb-10.6 vulnerabilities

Several security issues were discovered in MariaDB and this update includes a new upstream MariaDB version to fix these issues. In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes...

[SECURITY] [DLA 4172-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4172-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort May 20, 2025 https://wiki.debian.org/LTS -...

BELL-CVE-2025-4802

Bulletin has no description...

Bypass SharePoint Restricted View to exfiltrate data using Copilot AI and more…

TL;DR Restricted View allows users to read files, but not copy, download or print them Attackers will look for ways to circumvent these controls Traditional workarounds include manual transcription, screenshots, and photos OCR tools can extract text from screenshots Microsoft Copilot can read fil...

TYPO3-EXT-SA-2025-008: Multiple vulnerabilities in extension "Front End User Registration" (sr_feuser_register)

More info at https://typo3.org/security/advisory/typo3-ext-sa-2025-008...

Security Vulnerabilities fixed in Thunderbird 128.10.2 — Mozilla

An attacker was able to perform an out-of-bounds read or write on a JavaScript Promise object. An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes...

Security Vulnerabilities fixed in Thunderbird 138.0.2 — Mozilla

An attacker was able to perform an out-of-bounds read or write on a JavaScript Promise object. An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes...