Security update for python3

This update for python3 fixes the following issues: Security fixes: CVE-2025-4517: Fixed arbitrary filesystem writes outside the extraction directory during extraction with filter="data" bsc1244032 CVE-2025-4330: Fixed extraction filter bypass for linking outside extraction directory bsc1244060...

EUVD-2022-3633

Malicious code in bioql PyPI...

Kernel update: New kernel 2.6.32-042stab134.7 for Virtuozzo Containers for Linux 4.7, Server Bare Metal 5.0

This update provides a new kernel 2.6.32-042stab134.7 for Virtuozzo Containers for Linux 4.7 and Server Bare Metal 5.0. The new kernel introduces stability fixes. Vulnerability id: PSBM-89993 Running Ubuntu containers with systemd 229-4ubuntu21.8 could result in application failures due to...

Debian DLA-1445-3 : busybox regression update

It was found that the security update of busybox announced as DLA-1445-1 to prevent the exploitation of CVE-2011-5325, a symlinking attack, was too strict in case of cpio archives. This update restores the old behavior. For Debian 8 'Jessie', this problem has been fixed in version...

CVE-2017-16355

In agent/Core/SpawningKit/Spawner.h in Phusion Passenger 5.1.10 fixed in Passenger Open Source 5.1.11 and Passenger Enterprise 5.1.10, if Passenger is running as root, it is possible to list the contents of arbitrary files on a system by symlinking a file named REVISION from the application root...

CVE-2017-16355

In agent/Core/SpawningKit/Spawner.h in Phusion Passenger 5.1.10 fixed in Passenger Open Source 5.1.11 and Passenger Enterprise 5.1.10, if Passenger is running as root, it is possible to list the contents of arbitrary files on a system by symlinking a file named REVISION from the application root...

GLSA-200511-16 : GNUMP3d: Directory traversal and insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200511-16 GNUMP3d: Directory traversal and insecure temporary file creation Ludwig Nussel from SUSE Linux has identified two vulnerabilities in GNUMP3d. GNUMP3d fails to properly check for the existence of /tmp/index.lok before...

fkey 0.0.2 - Local File Accessibility

fkey 0.0.2 - Local File Accessibility / fkeyv0.0.2: local/remote file accessibility exploit. by: vade79/v9 [email protected] fakehalo/realhalo netris homepage/URL: http://www.freshmeat.net/projects/fkey compile: gcc xfkey.c -o xfkey syntax: ./xfkey /etc/shadow 2/savefilename bug: fkey is a finger-li...