OPENSUSE-SU-2025:14745-1 go1.22-1.22.12-1.1 on GA media

These are all security issues fixed in the go1.22-1.22.12-1.1 package on the GA media of openSUSE Tumbleweed...

[SECURITY] [DLA 4044-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4044-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort February 07, 2025 https://wiki.debian.org/LTS -...

CVE-2025-24697

Missing Authorization vulnerability in Realwebcare Image Gallery – Responsive Photo Gallery awesome-responsive-photo-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Gallery – Responsive Photo Gallery: from n/a through = 1.0.5...

CVE-2024-10383

An issue has been discovered in the gitlab-web-ide-vscode-fork component distributed over CDN affecting all versions prior to 1.89.1-1.0.0-dev-20241118094343and used by all versions of GitLab CE/EE starting from 15.11 prior to 17.3 and which also temporarily affected versions 17.4, 17.5 and 17.6,...

OPENSUSE-SU-2025:14743-1 python311-numba-0.61.0-1.1 on GA media

These are all security issues fixed in the python311-numba-0.61.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14742-1 chromedriver-133.0.6943.53-1.1 on GA media

These are all security issues fixed in the chromedriver-133.0.6943.53-1.1 package on the GA media of openSUSE Tumbleweed...

MozillaThunderbird-128.7.0-1.1 on GA media (moderate)

MozillaThunderbird-128.7.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:14731-1 Rating: moderate Cross-References: CVE-2024-11704 CVE-2025-0510 CVE-2025-1009 CVE-2025-1010 CVE-2025-1011 CVE-2025-1012 CVE-2025-1013 CVE-2025-1014 CVE-2025-1015 CVE-2025-1016 CVE-2025-1017 CVSS scores:...

OPENSUSE-SU-2025:14740-1 python311-cryptography-vectors-44.0.0-1.1 on GA media

These are all security issues fixed in the python311-cryptography-vectors-44.0.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14737-1 nginx-1.27.4-1.1 on GA media

These are all security issues fixed in the nginx-1.27.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14735-1 go1.24-1.24rc3-1.1 on GA media

These are all security issues fixed in the go1.24-1.24rc3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14736-1 krb5-1.21.3-2.1 on GA media

These are all security issues fixed in the krb5-1.21.3-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14738-1 pam_pkcs11-0.6.13-1.1 on GA media

These are all security issues fixed in the pampkcs11-0.6.13-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14739-1 python311-cryptography-44.0.0-1.1 on GA media

These are all security issues fixed in the python311-cryptography-44.0.0-1.1 package on the GA media of openSUSE Tumbleweed...

[slackware-security] curl

New curl packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/curl-8.12.0-i586-1slack15.0.txz: Upgraded. This release fixes the following security issues: gzip integer overflow eventfd double close...

CVE-2022-24833

PrivateBin is minimalist, open source online pastebin clone where the server has zero knowledge of pasted data. In PrivateBin v1.4.0 a cross-site scripting XSS vulnerability was found. The vulnerability is present in all versions from v0.21 of the project, which was at the time still called...

CVE-2022-22299

A format string vulnerability CWE-134 in the command line interpreter of FortiADC version 6.0.0 through 6.0.4, FortiADC version 6.1.0 through 6.1.5, FortiADC version 6.2.0 through 6.2.1, FortiProxy version 1.0.0 through 1.0.7, FortiProxy version 1.1.0 through 1.1.6, FortiProxy version 1.2.0 throu...

CVE-2024-2878

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.7 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2. It was possible for an attacker to cause a denial of service by crafting unusual search terms for branch names...

CVE-2024-9631

An issue was discovered in GitLab CE/EE affecting all versions starting from 13.6 prior to 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2, where viewing diffs of MR with conflicts can be slow...

CVE-2025-0725 vulnerabilities

Vulnerabilities for packages: curl...

CVE-2025-0725

creationtimestamp| type| source ---|---|--- 2025-02-05 07:24:03+00:00| seen| https://daniel.haxx.se/blog/2025/02/05/curl-8-12-0/ 2025-02-05 08:44:37+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lhg6ld6ww626 2025-02-05 09:58:56+00:00| seen|...