LinuxSecurity.com

05.05.2025 17:20 * bsc#1202828 * bsc#1217770 * bsc#1224413 * jsc#PED-11066 * jsc#PED-1174

05.05.2025 17:20 

05.05.2025 17:20 * bsc#1202828 * bsc#1217770 * bsc#1224413 * jsc#PED-11066 * jsc#PED-1174

05.05.2025 17:20 

05.05.2025 12:20 libpam vulnerable to leaking hashed passwords. References: - https://bugs.mageia.org/show_bug.cgi?id=34219 - https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/S3CBZDTRIQZKAUHHWFBJKJ7PYA7BPARL/

05.05.2025 12:20 GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in coders/jxl.c, related to an ImportViewPixelArea call. References:

05.05.2025 12:20 mod_auth_openidc allows OIDCProviderAuthRequestMethod POSTs to leak protected data. References: - https://bugs.mageia.org/show_bug.cgi?id=34216

05.05.2025 12:20 Vanilla upstream kernel version 6.6.88 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links. References: - https://bugs.mageia.org/show_bug.cgi?id=34191

05.05.2025 12:20 DoS via malformed HTTP/2 PRIORITY_UPDATE frame. Bypass of rules in Rewrite Valve. References: - https://bugs.mageia.org/show_bug.cgi?id=34231

05.05.2025 12:20 FastCGI fcgi2 2.x through 2.4.4 has an integer overflow via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c.

05.05.2025 05:42 containerd is a container runtime. A bug was found in containerd where containers launched with a User set as a `UID:GID` larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as root . This could cause unexpected behavior

05.05.2025 00:20 

04.05.2025 14:00 ansible 2.10.7+merged+base+2.10.17+dfsg-0+deb11u1 introduced a regression in the win_template module. This caused win_template tasks to fail with an error. For Debian 11 bullseye, this problem has been fixed in version

04.05.2025 08:20 Update to 136.0.7103.59 CVE-2025-4096: Heap buffer overflow in HTML CVE-2025-4050: Out of bounds memory access in DevTools CVE-2025-4051: Insufficient data validation in DevTools CVE-2025-4052: Inappropriate implementation in DevTools

04.05.2025 08:20 April 2025 CPU