LinuxSecurity.com

13.02.2025 03:30 

13.02.2025 03:30 * bsc#1229644 * bsc#1229663 * bsc#1230998 * bsc#1231993

13.02.2025 03:30 

12.02.2025 22:10 The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-24143

12.02.2025 22:10 Two vulnerabilities were discovered in pam-pkcs11, a PAM module which allows to use PKCS#11 based smart cards in the PAM authentication stack, which may allow to bypass the authentication in some scenarios.

12.02.2025 22:10 * bsc#1229644 * bsc#1230998 * bsc#1231993 Cross-References:

12.02.2025 22:10 

12.02.2025 22:10 * bsc#1229644 * bsc#1229663 * bsc#1230998 * bsc#1231993

12.02.2025 22:10 

12.02.2025 16:40 BlueZ could be made to crash or run programs as your login if it received specially crafted Bluetooth requests.

12.02.2025 16:40 * bsc#1230998 * bsc#1231993 Cross-References: * CVE-2024-45016

12.02.2025 16:40 Remote Code Execution in pypa/setuptools. References: - https://bugs.mageia.org/show_bug.cgi?id=33536 - https://lists.suse.com/pipermail/sle-updates/2024-August/036709.html

12.02.2025 16:40 Mercurial configuration injectable in repo revision when installing via pip. References: - https://bugs.mageia.org/show_bug.cgi?id=33542

12.02.2025 16:40 Twisted.web has disordered HTTP pipeline response. Twisted.web has disordered HTTP pipeline response. HTML injection in HTTP redirect body. References:

12.02.2025 16:40 Waitress has a request processing race condition in HTTP pipelining with an invalid first request. Waitress has a denial of service leading to high CPU usage/resource exhaustion.