OPENSUSE-SU-2025:14633-1 grafana-11.3.0-4.1 on GA media

These are all security issues fixed in the grafana-11.3.0-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14639-1 yq-4.44.6-1.1 on GA media

These are all security issues fixed in the yq-4.44.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14636-1 proftpd-1.3.8c-1.1 on GA media

These are all security issues fixed in the proftpd-1.3.8c-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14638-1 valkey-8.0.2-1.1 on GA media

These are all security issues fixed in the valkey-8.0.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14632-1 frr-10.2.1-1.1 on GA media

These are all security issues fixed in the frr-10.2.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14634-1 operator-sdk-1.39.0-1.1 on GA media

These are all security issues fixed in the operator-sdk-1.39.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14631-1 dpdk-23.11.1-4.1 on GA media

These are all security issues fixed in the dpdk-23.11.1-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14630-1 MozillaFirefox-134.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-134.0-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-57878

creationtimestamp| type| source ---|---|--- 2025-01-11 15:04:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1317 2025-01-11 15:15:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhyrtq3ty2a 2025-01-11 15:38:30+00:00| seen|...

CVE-2024-57793

In the Linux kernel, the following vulnerability has been resolved: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors In CoCo VMs it is possible for the untrusted host to cause setmemorydecrypted to fail such that an error is returned and the resulting memory is shared. Callers...

[SECURITY] [DLA 4011-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4011-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort January 11, 2025 https://wiki.debian.org/LTS -...

CVE-2024-12519

creationtimestamp| type| source ---|---|--- 2025-01-11 07:57:52+00:00| seen| https://infosec.exchange/users/cve/statuses/113808655768195033 2025-01-11 08:04:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1286 2025-01-11 08:16:04+00:00| seen|...

PT-2025-2625 · Hcl · Hcl Myxalytics

Name of the Vulnerable Software and Affected Versions: HCL MyXalytics version 6.3 Description: The issue is related to weak input validation in the application, which accepts special characters and lacks length validation. This weakness can potentially lead to security issues such as SQL injectio...

govulncheck-vulndb-0.0.20250108T191942-1.1 on GA media (moderate)

govulncheck-vulndb-0.0.20250108T191942-1.1 on GA media Announcement ID: openSUSE-SU-2025:14624-1 Rating: moderate Cross-References: CVE-2024-25133 CVE-2024-28892 CVE-2024-45387 CVE-2024-54148 CVE-2024-55196 CVE-2024-55947 CVE-2024-56362 CVE-2024-56513 CVE-2024-56514 CVE-2025-21609 CVE-2025-21613...

OPENSUSE-SU-2025:14629-1 chromedriver-131.0.6778.264-1.1 on GA media

These are all security issues fixed in the chromedriver-131.0.6778.264-1.1 package on the GA media of openSUSE Tumbleweed...

USN-7185-2: Linux kernel (Azure) vulnerabilities

Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an integer overflow vulnerability. A local attacker could use this to cause a denial of service system crash. CVE-2022-36402 Zheng Wang discovered a use-after-free in the Renesas Ethernet AVB driver in th...

[SECURITY] [DSA 5840-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5840-1 [email protected] https://www.debian.org/security/ Andres Salomon January 09, 2025 https://www.debian.org/security/faq -...

CVE-2024-13041

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1. When a user is created via the SAML provider, the external groups setting overrides the external provider configuration. A...

CVE-2024-6324

An issue was discovered in GitLab CE/EE affecting all versions starting from 15.7 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1. It was possible to trigger a DoS by creating cyclic references between epics...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-firefox-128.6.0esr-i686-1slack15.0.txz: Upgraded. This update contains security fixes and improvements. For more...