ALSA-2025:17675 Important: compat-libtiff3 security update

The libtiff3 package provides libtiff 3, an older version of libtiff library for manipulating TIFF Tagged Image File Format image format files. This version should be used only if you are unable to use the current version of libtiff. Security Fixes: libtiff: Libtiff Write-What-Where CVE-2025-9900...

Important: compat-libtiff3 security update

The libtiff3 package provides libtiff 3, an older version of libtiff library for manipulating TIFF Tagged Image File Format image format files. This version should be used only if you are unable to use the current version of libtiff. Security Fixes: libtiff: Libtiff Write-What-Where CVE-2025-9900...

EUVD-2021-24893

Malware in sbrugna...

EUVD-2020-8191

Malware in sbrugna...

EUVD-2017-6569

Malware in sbrugna...

EUVD-2024-20833

Malicious code in bioql PyPI...

EUVD-2024-19783

Malicious code in bioql PyPI...

EUVD-2025-30917

Malicious code in bioql PyPI...

EUVD-2024-41326

Malicious code in bioql PyPI...

EUVD-2024-54498

Malicious code in bioql PyPI...

EUVD-2022-33393

Malicious code in bioql PyPI...

EUVD-2024-42464

Malicious code in bioql PyPI...

EUVD-2024-36231

Malicious code in bioql PyPI...

EUVD-2024-18456

Malicious code in bioql PyPI...

BIT-MONGOOSE-2024-53900

Mongoose before 8.8.3 can improperly use $where in match, leading to search injection...

Libtiff: libtiff write-what-where

...

BIT-MONGOOSE-2025-23061

Mongoose before 8.9.5 can improperly use a nested $where filter with a populate match, leading to search injection. NOTE: this issue exists because of an incomplete fix for CVE-2024-53900...

Linux Distros Unpatched Vulnerability : CVE-2025-9900

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Libtiff. This vulnerability is a write-what-where condition, triggered when the library processes a specially crafted TIFF image file. By...

CVE-2025-9900

A flaw was found in Libtiff. This vulnerability is a "write-what-where" condition, triggered when the library processes a specially crafted TIFF image file. By providing an abnormally large image height value in the file's metadata, an attacker can trick the library into writing attacker-controll...

AZL-67803 CVE-2025-9900 affecting package libtiff for versions less than 4.6.0-10

A flaw was found in Libtiff. This vulnerability is a "write-what-where" condition, triggered when the library processes a specially crafted TIFF image file. By providing an abnormally large image height value in the file's metadata, an attacker can trick the library into writing attacker-controll...