DLA-4047-1 sssd - security update

Bulletin has no description...

CVE-2024-47256

Successful exploitation of this vulnerability could allow an attacker who needs to have Admin access privileges to read hardcoded AES passphrase, which may be used for decryption of certain data within backup files of 2N Access Commander version 1.14 and older. 2N has released an updated version...

CVE-2024-13416

Using API in the 2N OS device, authorized user can enable logging, which discloses valid authentication tokens in system log. 2N has released an updated version 2.46 of 2N OS, where this vulnerability is mitigated. It is recommended that all customers update their devices to the latest 2N OS...

CVE-2024-13417

Specifically crafted payloads sent to the RFID reader could cause DoS of RFID reader. After the device is restarted, it gets back to fully working state. 2N has released an updated version 2.46 of 2N OS, where this vulnerability is mitigated. It is recommended that all customers update their...

CVE-2024-47258

2N Access Commander version 2.1 and prior is vulnerable in default settings to Man In The Middle attack due to not verifying certificates of 2N edge devices. 2N has currently released an updated version 3.3 of 2N Access Commander, with added Certificate Fingerprint Verification. Since version 2.2...

CGA-85C5-P5CM-CHJR

Bulletin has no description...

CVE-2024-48019

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal', Files or Directories Accessible to External Parties vulnerability in Apache Doris. Application administrators can read arbitrary files from the server filesystem through path traversal. Users are recommended to upgrade ...

[SECURITY] Fedora 41 Update: rust-rpm-sequoia-1.7.0-5.fc41

An implementation of the RPM PGP interface using Sequoia...

CVE-2025-25063

An XSS issue was discovered in Backdrop CMS 1.28.x before 1.28.5 and 1.29.x before 1.29.3. It does not sufficiently validate uploaded SVG images to ensure they do not contain potentially dangerous SVG tags. SVG images can contain clickable links and executable scripting, and using a crafted SVG, ...

CVE-2024-53994

Discourse is an open source platform for community discussion. In affected versions users who disable chat in preferences could still be reachable in some cases. This problem has been patched in the latest version of Discourse. Users are advised to upgrade. Users unable to upgrade should disable...

SUSE-SU-2025:0384-1 Security update for bind

This update for bind fixes the following issues: - CVE-2024-11187: Fixes CPU exhaustion caused by many records in the additional section bsc1236596...

RHSA-2025:1138 Red Hat Security Advisory: firefox security update

Bulletin has no description...

RHSA-2025:1096 Red Hat Security Advisory: ovn24.03 security update

Bulletin has no description...

RHSA-2025:1093 Red Hat Security Advisory: ovn23.03 security update

Bulletin has no description...

RHSA-2025:1091 Red Hat Security Advisory: ovn22.09 security update

Bulletin has no description...

RHSA-2025:1087 Red Hat Security Advisory: ovn23.03 security update

Bulletin has no description...

RHSA-2025:1086 Red Hat Security Advisory: ovn22.12 security update

Bulletin has no description...

RHSA-2025:1084 Red Hat Security Advisory: ovn22.06 security update

Bulletin has no description...

RHSA-2025:1066 Red Hat Security Advisory: firefox security update

Bulletin has no description...

BIT-GITLAB-2024-1539 Missing Authorization in GitLab

An issue has been discovered in GitLab EE affecting all versions starting from 15.2 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2. It was possible to disclose updates to issues to a banned group member using the API...