MGASA-2025-0203 Updated php packages fix security vulnerabilities

PGSQL: Fixed GHSA-hrwm-9436-5mv3 pgsql extension does not check for errors during escaping. CVE-2025-1735 SOAP: Fixed GHSA-453j-q27h-5p8x NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix. CVE-2025-6491 Standard: Fixed GHSA-3cr5-j632-f35r Null byte termination in...

BELL-CVE-2025-38215

Bulletin has no description...

corepack22-22.15.1-1.1 on GA media (moderate)

corepack22-22.15.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:15250-1 Rating: moderate Cross-References: CVE-2025-23165 CVE-2025-23166 CVSS scores: CVE-2025-23165 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2025-23165 SUSE : 6.3...

firefox-esr-128.12.0-1.1 on GA media (moderate)

firefox-esr-128.12.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15216-1 Rating: moderate Cross-References: CVE-2025-6424 CVE-2025-6425 CVE-2025-6426 CVE-2025-6429 CVE-2025-6430 CVSS scores: CVE-2025-6424 SUSE : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2025-6424 SUSE : 8.7...

radare2-5.9.8-3.1 on GA media (moderate)

radare2-5.9.8-3.1 on GA media Announcement ID: openSUSE-SU-2025:15292-1 Rating: moderate Cross-References: CVE-2025-1744 CVE-2025-1864 CVE-2025-5641 CVSS scores: CVE-2025-1744 SUSE : 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVE-2025-1744 SUSE : 10...

xwayland-24.1.8-1.1 on GA media (moderate)

xwayland-24.1.8-1.1 on GA media Announcement ID: openSUSE-SU-2025:15311-1 Rating: moderate Cross-References: CVE-2025-49175 CVE-2025-49176 CVE-2025-49177 CVE-2025-49178 CVE-2025-49179 CVE-2025-49180 CVSS scores: CVE-2025-49175 SUSE : 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H CVE-2025-49175...

traefik2-2.11.26-1.1 on GA media (moderate)

traefik2-2.11.26-1.1 on GA media Announcement ID: openSUSE-SU-2025:15305-1 Rating: moderate Cross-References: CVE-2024-28180 CVE-2024-45338 CVE-2025-22868 CVE-2025-22869 CVE-2025-22871 CVE-2025-22872 CVE-2025-27144 CVE-2025-32431 CVE-2025-47952 CVSS scores: CVE-2024-28180 SUSE : 4.3...

tomcat11-11.0.8-1.1 on GA media (moderate)

tomcat11-11.0.8-1.1 on GA media Announcement ID: openSUSE-SU-2025:15303-1 Rating: moderate Cross-References: CVE-2025-46701 CVE-2025-48988 CVE-2025-49125 CVSS scores: CVE-2025-46701 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2025-46701 SUSE : 6.3...

sudo-1.9.17p1-1.1 on GA media (moderate)

sudo-1.9.17p1-1.1 on GA media Announcement ID: openSUSE-SU-2025:15298-1 Rating: moderate Cross-References: CVE-2025-32462 CVE-2025-32463 CVSS scores: CVE-2025-32462 SUSE : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2025-32462 SUSE : 7.3...

python311-3.11.13-2.1 on GA media (moderate)

python311-3.11.13-2.1 on GA media Announcement ID: openSUSE-SU-2025:15286-1 Rating: moderate Cross-References: CVE-2024-12718 CVE-2025-4330 CVE-2025-4517 CVSS scores: CVE-2024-12718 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2025-4330 SUSE : 8.2...

jgit-5.11.0-2.1 on GA media (moderate)

jgit-5.11.0-2.1 on GA media Announcement ID: openSUSE-SU-2025:15232-1 Rating: moderate Cross-References: CVE-2023-4759 CVE-2025-4949 CVSS scores: CVE-2023-4759 SUSE : 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2025-4949 SUSE : 4.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N Affected...

grafana-11.6.3-1.1 on GA media (moderate)

grafana-11.6.3-1.1 on GA media Announcement ID: openSUSE-SU-2025:15226-1 Rating: moderate Cross-References: CVE-2025-1088 CVE-2025-3415 CVSS scores: CVE-2025-1088 SUSE : 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L CVE-2025-1088 SUSE : 5.1...

CVE-2025-38192

In the Linux kernel, the following vulnerability has been resolved: net: clear the dst when changing skb protocol A not-so-careful NAT46 BPF program can crash the kernel if it indiscriminately flips ingress packets from v4 to v6: BUG: kernel NULL pointer dereference, address: 0000000000000000...

CVE-2025-38202

In the Linux kernel, the following vulnerability has been resolved: bpf: Check rcureadlocktraceheld in bpfmaplookuppercpuelem bpfmaplookuppercpuelem helper is also available for sleepable bpf program. When BPF JIT is disabled or under 32-bit host, bpfmaplookuppercpuelem will not be inlined. Using...

Park

This project is used to study the...

BELL-CVE-2025-38105

Bulletin has no description...

PT-2025-27843 · WordPress · Wp Human Resource Management

Name of the Vulnerable Software and Affected Versions: WP Human Resource Management plugin versions 2.0.0 through 2.2.17 Description: The issue is related to missing authorization in the ajax insert employee and update employee functions. This allows authenticated attackers with Employee-level...

Ubuntu: Security Advisory (USN-7608-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 10 : kernel (ELSA-2025-9079)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-9079 advisory. 6.12.0-55.19.1.0.10.OL10 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Add new Oracle Linux Driver Signing key 1 certificate...

CVE-2025-38098

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Don't treat wb connector as physical in createvalidatestreamforsink Don't try to operate on a drmwbconnector as an amdgpudmconnector. While dereferencing aconnector-base will "work" it's wrong and might lead to...