LinuxSecurity.com

17.03.2025 22:50 

17.03.2025 22:50 

17.03.2025 22:50 list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale. (CVE-2025-25724

17.03.2025 22:50 Timing side-channel in ECDSA signature computation. References: - https://bugs.mageia.org/show_bug.cgi?id=34106 - https://openssl-library.org/news/secadv/20250120.txt

17.03.2025 22:50 Bugs and security with streams have been fixed. References: - https://bugs.mageia.org/show_bug.cgi?id=34091 - https://www.php.net/ChangeLog-8.php#8.2.28

17.03.2025 22:50 

17.03.2025 17:30 Several security issues were fixed in X.Org X Server.

17.03.2025 17:30 * jsc#PED-11136 Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6

17.03.2025 17:30 

17.03.2025 11:11 patchlevel 1202 Security fix for CVE-2025-29768

17.03.2025 11:11 Update to upstream 20250311: amdgpu: many firmware updates qcom: Update gpu firmwares for qcs8300 chipset add firmware for qat_420xx devices amdgpu: DMCUB updates for various ASICs

17.03.2025 11:11 Fix for CVE-2025-26699: Potential denial-of-service vulnerability in django.utils.text.wrap

17.03.2025 11:11 Rebase to 2.7.0

17.03.2025 11:11 Update to 2.12.10 Fix CVE-2024-56171 and CVE-2025-24928.

17.03.2025 11:11 This update, to the current upstream libssh2 release, addresses a couple of security issues: CVE-2023-6918 CVE-2023-48795 - "Terrapin")