BELL-CVE-2024-56608

Bulletin has no description...

OPENSUSE-SU-2025:14613-1 velero-1.15.1-1.1 on GA media

These are all security issues fixed in the velero-1.15.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14612-1 sops-3.9.3-1.1 on GA media

These are all security issues fixed in the sops-3.9.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14611-1 libQt6Pdf6-6.8.1-2.1 on GA media

These are all security issues fixed in the libQt6Pdf6-6.8.1-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14610-1 assimp-devel-5.4.3-3.1 on GA media

These are all security issues fixed in the assimp-devel-5.4.3-3.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-56692

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on node blkaddr in truncatenode syzbot reports a f2fs bug as below: ------------ cut here ------------ kernel BUG at fs/f2fs/segment.c:2534! RIP: 0010:f2fsinvalidateblocks+0x35f/0x370...

PT-2025-2605 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: The issue is related to the Linux kernel, where a vulnerability has been resolved. The problem occurs when the hctx is not removed from the cpuhp callback list, which can lead to a...

CVE-2023-5117

An issue was discovered in GitLab CE/EE affecting all versions before 17.6.0 in which users were unaware that files uploaded to comments on confidential issues and epics of public projects could be accessed without authentication via a direct link to the uploaded file URL...

GHSA-76H9-2VWH-W278 vulnerabilities

Vulnerabilities for packages: hadoop-fips, jenkins, apache-nifi...

GHSA-76H9-2VWH-W278 vulnerabilities

Vulnerabilities for packages: apache-nifi, jenkins...

SUSE-SU-2024:4409-1 Recommended update for vim

This update for vim fixes the following issues: - CVE-2024-47814: Fixed use-after-free when closing buffers in Vim bsc1231373 - CVE-2024-43374: Fixed use-after-free in alistadd bsc1229238 Other fixes: - Remove patch that introduced a bug caused significantly more CPU usage bsc1220618 - Updated to...

Citrix Cloud Azure Questions on MCS Disk Network Access

Security alerts are receiving for VM disks on our Citrix Cloud Azure environment and is raising Security concerns. Currently, all our VDIs have two disks, an Identity and Data disk. These disks are created with the default Azure setting of “Enable public access from all networks”. We are...

libparaview5_12-5.12.1-2.1 on GA media (moderate)

libparaview512-5.12.1-2.1 on GA media Announcement ID: openSUSE-SU-2024:14609-1 Rating: moderate Cross-References: CVE-2024-50602 CVSS scores: CVE-2024-50602 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2024-50602 SUSE : 5.6...

Amazon Linux 2 : expat (ALAS-2024-2710)

The version of expat installed on the remote host is prior to 2.1.0-15. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2710 advisory. An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XMLParseBuffer. CVE-2024-45490...

OPENSUSE-SU-2024:14609-1 libparaview5_12-5.12.1-2.1 on GA media

These are all security issues fixed in the libparaview512-5.12.1-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14608-1 govulncheck-vulndb-0.0.20241220T214820-1.1 on GA media

These are all security issues fixed in the govulncheck-vulndb-0.0.20241220T214820-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-11607

The GTPayment Donations WordPress plugin through 1.0.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

CGA-R98X-C7CH-HJ4F

Bulletin has no description...

OPENSUSE-SU-2024:14607-1 chromedriver-131.0.6778.204-1.1 on GA media

These are all security issues fixed in the chromedriver-131.0.6778.204-1.1 package on the GA media of openSUSE Tumbleweed...

USN-7179-1: Linux kernel vulnerabilities

Andy Nguyen discovered that the Bluetooth L2CAP implementation in the Linux kernel contained a type-confusion error. A physically proximate remote attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2020-12351 Andy Nguyen discovered that the...