LinuxSecurity.com

11.04.2025 09:00 The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2024-54551

11.04.2025 09:00 Several security issues were fixed in libsoup.

11.04.2025 03:31 * bsc#1065729 * bsc#1179878 * bsc#1180814 * bsc#1185762 * bsc#1195823

11.04.2025 03:31 

11.04.2025 03:31 * bsc#1193629 * bsc#1197227 * bsc#1207034 * bsc#1207186 * bsc#1207878

11.04.2025 03:31 HAProxy could be made to crash or run programs if it received specially crafted network traffic.

10.04.2025 22:04 

10.04.2025 16:52 

10.04.2025 16:52 * bsc#1234452 Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4

10.04.2025 11:22 CVE-2025-27835 ghostscript: Buffer overflow when converting glyphs to unicode CVE-2025-27834 ghostscript: Buffer overflow caused by an oversized Type 4 function in a PDF CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow

10.04.2025 11:22 Dino could be made to expose sensitive information over the network.

10.04.2025 11:22 USN-7346-1 introduced a regression in OpenSC.

10.04.2025 11:22 XZ has a heap-use-after-free bug in threaded .xz decoder. References: - https://bugs.mageia.org/show_bug.cgi?id=34164

10.04.2025 11:22 containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a `UID:GID` larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as root . This could cause unexpected behavior

10.04.2025 11:22 atop through 2.11.0 allows local users to cause a denial of service or possibly have unspecified other impact by running certain types of unprivileged processes while a different user runs atop.