SUSE SLES12 Security Update : apache2-mod_jk (SUSE-SU-2025:0143-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2025:0143-1 advisory. - Update to version 1.2.50: - CVE-2024-46544: Fixed incorrect default permissions vulnerabilitymay that could lead to information disclosure and/or...

CVE-2024-11146

TrueFiling is a collaborative, web-based electronic filing system where attorneys, paralegals, court reporters and self-represented filers collect public legal documentation into cases. TrueFiling is an entirely cloud-hosted application. Prior to version 3.1.112.19, TrueFiling trusted some...

git-2.48.1-1.1 on GA media (moderate)

git-2.48.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:14652-1 Rating: moderate Cross-References: CVE-2024-50349 CVSS scores: CVE-2024-50349 SUSE : 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : rsync regression (USN-7206-2)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-7206-2 advisory. USN-7206-1 fixed vulnerabilities in rsync. The update introduced a regression in rsync. This update...

grafana-11.3.0-5.1 on GA media (moderate)

grafana-11.3.0-5.1 on GA media Announcement ID: openSUSE-SU-2025:14654-1 Rating: moderate Cross-References: CVE-2025-21613 CVSS scores: CVE-2025-21613 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

CVE-2024-57889

In the Linux kernel, the following vulnerability has been resolved: pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking If a device uses MCP23xxx IO expander to receive IRQs, the following bug can happen: BUG: sleeping function called from invalid context at...

CVE-2024-54031

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsethash: unaligned atomic read on struct nftsetext Access to genmask field in struct nftsetext results in unaligned atomic read: 72.130109 Unable to handle kernel paging request at virtual address ffff0000c2bb708c...

PT-2025-5190 · WordPress · Solidres

Name of the Vulnerable Software and Affected Versions: Solidres – Hotel booking plugin versions 0.9.4 and earlier Description: The issue is related to improper neutralization of special elements used in an SQL command, allowing SQL injection. This problem can be exploited to inject malicious SQL...

Fedora 41 : seamonkey (2025-135cf1b7f3)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-135cf1b7f3 advisory. Fix bookmarks restoring from file. ---- Update to 2.53.20 Tenable has extracted the preceding description block directly from the Fedora security advisory...

git-lfs-3.6.1-1.1 on GA media (moderate)

git-lfs-3.6.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:14649-1 Rating: moderate Cross-References: CVE-2024-53263 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the git-lfs-3.6.1-1.1...

Fedora 40 : seamonkey (2025-4945eb6eeb)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-4945eb6eeb advisory. Fix bookmarks restoring from file. ---- Update to 2.53.20 Tenable has extracted the preceding description block directly from the Fedora security advisory...

CVE-2025-22146 Improper authentication on SAML SSO process allows user impersonation in sentry

Sentry is a developer-first error tracking and performance monitoring tool. A critical vulnerability was discovered in the SAML SSO implementation of Sentry. It was reported to us via our private bug bounty program. The vulnerability allows an attacker to take over any user account by using a...

CVE-2024-57897

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Correct the migration DMA map direction The SVM DMA device map direction should be set the same as the DMA unmap setting, otherwise the DMA core will report the following warning. Before finialize this solution,...

CVE-2024-57887

In the Linux kernel, the following vulnerability has been resolved: drm: adv7511: Fix use-after-free in adv7533attachdsi The hostnode pointer was assigned and freed in adv7533parsedt, and later, adv7533attachdsi uses the same. Fix this use-after-free issue by dropping ofnodeput in adv7533parsedt...

CVE-2024-36476

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: Ensure 'ibsge list' is accessible Move the declaration of the 'ibsge list' variable outside the 'alwaysinvalidate' block to ensure it remains accessible for use throughout the function. Previously, 'ibsge list' was...

CVE-2024-57844 drm/xe: Fix fault on fd close after unbind

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix fault on fd close after unbind If userspace holds an fd open, unbinds the device and then closes it, the driver shouldn't try to access the hardware. Protect it by using drmdeventer/drmdevexit. This fixes the followin...

CVE-2024-57841 net: fix memory leak in tcp_conn_request()

In the Linux kernel, the following vulnerability has been resolved: net: fix memory leak in tcpconnrequest If inetcskreqskqueuehashadd return false, tcpconnrequest will return without free the dst memory, which allocated in afops-routereq. Here is the kmemleak stack: unreferenced object...

CVE-2024-57801 net/mlx5e: Skip restore TC rules for vport rep without loaded flag

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Skip restore TC rules for vport rep without loaded flag During driver unload, unregisternetdev is called after unloading vport rep. So, the mlx5ereppriv is already freed while trying to get rpriv-netdev, or walk...

CVE-2024-39282 net: wwan: t7xx: Fix FSM command timeout issue

In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: Fix FSM command timeout issue When driver processes the internal state change command, it use an asynchronous thread to process the command operation. If the main thread detects that the task has timed out, the...

CVE-2024-57902

CVE-2024-57902 affects the Linux kernel; the issue was in af_packet's vlan_get_tci() where MSG_PEEK handling could crash a skb during packet reception. The patch reworks vlan_get_tci() to avoid touching the skb entirely and makes skb a const argument. This mitigates the crash by ensuring that vla...