[SECURITY] [DLA 4011-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4011-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort January 11, 2025 https://wiki.debian.org/LTS -...

CVE-2024-12519

creationtimestamp| type| source ---|---|--- 2025-01-11 07:57:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113808655768195033 2025-01-11 08:04:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1286 2025-01-11 08:16:04+00:00| seen|...

PT-2025-2625 · Hcl · Hcl Myxalytics

Name of the Vulnerable Software and Affected Versions: HCL MyXalytics version 6.3 Description: The issue is related to weak input validation in the application, which accepts special characters and lacks length validation. This weakness can potentially lead to security issues such as SQL injectio...

govulncheck-vulndb-0.0.20250108T191942-1.1 on GA media (moderate)

govulncheck-vulndb-0.0.20250108T191942-1.1 on GA media Announcement ID: openSUSE-SU-2025:14624-1 Rating: moderate Cross-References: CVE-2024-25133 CVE-2024-28892 CVE-2024-45387 CVE-2024-54148 CVE-2024-55196 CVE-2024-55947 CVE-2024-56362 CVE-2024-56513 CVE-2024-56514 CVE-2025-21609 CVE-2025-21613...

OPENSUSE-SU-2025:14629-1 chromedriver-131.0.6778.264-1.1 on GA media

These are all security issues fixed in the chromedriver-131.0.6778.264-1.1 package on the GA media of openSUSE Tumbleweed...

USN-7185-2: Linux kernel (Azure) vulnerabilities

Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an integer overflow vulnerability. A local attacker could use this to cause a denial of service system crash. CVE-2022-36402 Zheng Wang discovered a use-after-free in the Renesas Ethernet AVB driver in th...

[SECURITY] [DSA 5840-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5840-1 [email protected] https://www.debian.org/security/ Andres Salomon January 09, 2025 https://www.debian.org/security/faq -...

CVE-2024-13041

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1. When a user is created via the SAML provider, the external groups setting overrides the external provider configuration. A...

CVE-2024-6324

An issue was discovered in GitLab CE/EE affecting all versions starting from 15.7 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1. It was possible to trigger a DoS by creating cyclic references between epics...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-firefox-128.6.0esr-i686-1slack15.0.txz: Upgraded. This update contains security fixes and improvements. For more...

Slackware: Security Advisory (SSA:2025-008-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2025:14624-1 govulncheck-vulndb-0.0.20250108T191942-1.1 on GA media

These are all security issues fixed in the govulncheck-vulndb-0.0.20250108T191942-1.1 package on the GA media of openSUSE Tumbleweed...

Ubuntu 20.04 LTS : Linux kernel (Azure) vulnerabilities (USN-7194-1)

"The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7194-1 advisory. Andy Nguyen discovered that the Bluetooth L2CAP implementation in the Linux kernel contained a type- confusion error. A physically proximate remote...

Slackware: Security Advisory (SSA:2025-008-03)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2025:14628-1 python311-slixmpp-1.8.6-1.1 on GA media

These are all security issues fixed in the python311-slixmpp-1.8.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14627-1 logback-1.2.11-4.1 on GA media

These are all security issues fixed in the logback-1.2.11-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14625-1 gstreamer-plugins-base-1.24.11-1.1 on GA media

These are all security issues fixed in the gstreamer-plugins-base-1.24.11-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14626-1 kubo-0.32.1-1.1 on GA media

These are all security issues fixed in the kubo-0.32.1-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-12431

An issue was discovered in GitLab CE/EE affecting all versions starting from 15.5 before 17.5.5, 17.6 before 17.6.3, and 17.7 before 17.7.1, in which unauthorized users could manipulate the status of issues in public projects...

CVE-2025-0194

An issue was discovered in GitLab CE/EE affecting all versions starting from 17.4 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1. Under certain conditions, access tokens may have been logged when API requests were made in a specific manner...