Debian dsa-6040 : thunderbird - security update

The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6040 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6040-1 [email protected]...

EUVD-2018-1987

Malware in sbrugna...

PT-2025-40955

Name of the Vulnerable Software and Affected Versions Dovecot IMAP Server versions 2.4.0 through 2.4.1 Description When cache is enabled, some passdb/userdb drivers incorrectly cache all users with the same cache key, leading to incorrect cached information being used. After a successful cached...

EUVD-2022-38055

Malicious code in bioql PyPI...

Debian dsa-6006 : jetty12 - security update

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6006 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6006-1 [email protected] https://www.debian.org/security/ Moritz...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 140 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 140.0.7339.80 Linux 140.0.7339.80/81 Windows and Mac contains a number of fixes and improvements -- a list of changes is...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2025:0084-1 Rating: important References: 1238575 Cross-References: CVE-2025-1914 CVE-2025-1915 CVE-2025-1916 CVE-2025-1917 CVE-2025-1918 CVE-2025-1919 CVE-2025-1921 CVE-2025-1922 CVE-2025-1923 Affected Products:...

OPENSUSE-SU-2025:0012-1 Security update for opera

This update for opera fixes the following issues: - Update to 116.0.5366.21 CHR-9904 Update Chromium on desktop-stable-131-5366 to 131.0.6778.86 DNA-119581 Crash at views::View::ConvertPointToTarget DNA-119847 Missing Opera warning color and some margins in Settings DNA-119853 Eula dialog is wron...

GHSA-VX3H-QWQW-R2WQ Inventree Server-Side Request Forgery vulnerability exposes server port/internal IP

Impact The "download image from remote URL" feature can be abused by a malicious actor to potentially extract information about server side resources. Submitting a crafted URL in place of a valid image can raise a server side error, which is reported back to the user. This error message may conta...

CVE-2022-48892

In the Linux kernel, the following vulnerability has been resolved: sched/core: Fix use-after-free bug in dupusercpusptr Since commit 07ec77a1d4e8 "sched: Allow task CPU affinity to be restricted on asymmetric systems", the setting and clearing of usercpusptr are done under pilock for arm64...

CVE-2022-48892

In the Linux kernel, the following vulnerability has been resolved: sched/core: Fix use-after-free bug in dupusercpusptr Since commit 07ec77a1d4e8 "sched: Allow task CPU affinity to be restricted on asymmetric systems", the setting and clearing of usercpusptr are done under pilock for arm64...

CVE-2022-48892 sched/core: Fix use-after-free bug in dup_user_cpus_ptr()

In the Linux kernel, the following vulnerability has been resolved: sched/core: Fix use-after-free bug in dupusercpusptr Since commit 07ec77a1d4e8 "sched: Allow task CPU affinity to be restricted on asymmetric systems", the setting and clearing of usercpusptr are done under pilock for arm64...

[SECURITY] Fedora 40 Update: botan2-2.19.5-1.fc40

Botan is a BSD-licensed crypto library written in C++. It provides a wide variety of basic cryptographic algorithms, X.509 certificates and CRLs, PKCS \10 certificate requests, a filter/pipe message processing system, and a wide variety of other features, all written in portable C++. The API...

SUSE-SU-2023:4101-1 Security update for conmon

This update for conmon fixes the following issues: conmon is rebuilt with the current stable release go1.21 bsc1215806...

CLSA-2023-1693427563 Update of alt-php

Jammy update: v5.15.97 upstream stable release LP: 2015599 - net: Remove WARNONONCEsk-skforwardalloc from skstreamkillqueues...

Important: python27:2.7 security update

Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for...

Buffer overflow

GVRET Stable Release as of Aug 15, 2015 was discovered to contain a buffer overflow via the handleConfigCmd function at SerialConsole.cpp...

CVE-2022-35161

GVRET tool (Stable Release prior to Aug 15, 2015) contains a buffer overflow in handleConfigCmd() within SerialConsole.cpp. The issue is described across multiple sources (CVE-2022-35161) with a high-severity CVSS 3.1 score (CRITICAL, NETWORK exploitability, no user interaction). The connected do...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 104 to the stable channel for Windows, Mac and Linux.Chrome 104 is also promoted to our new extended stable channel for Windows and Mac. This will roll out over the coming days/weeks. Chrome 104.0.5112.79 Mac/linux and...

GHSA-J5JH-HPR4-H332 Symfony Session Fixation Vulnerability

A session fixation vulnerability within the "Remember Me" login feature allows an attacker to impersonate the victim towards the web application if the session id value was previously known to the attacker. This issue has been fixed in Symfony 2.3.35, 2.6.12, and 2.7.7. Note that no fixes are...