Debian LTS: DLA-4313-1: node-tar-fs security update

29.09.2025 03:30 node-tar-fs versions prior to 3.1.1, 2.1.3, and 1.16.5 are vulnerable to symlink validation bypass if the destination directory is predictable with a specific tarball.

Debian: DSA-6014-1: gimp

28.09.2025 21:10 Several vulnerabilities were discovered in GIMP, the GNU Image Manipulation Program, which could result in denial of service or potentially the execution of arbitrary code if malformed Farbfeld, Wireless Bitmap, DICOM or Apple Icon images are opened.

Debian: DSA-6013-1: node-tar-fs

28.09.2025 21:10 It was discovered that the symlink validation in node-tar-fs, a Node.js module that provides filesystem-like access to tar files, could be bypassed.

Debian: DSA-6003-2: firefox-esr update

28.09.2025 21:10 Firefox 140.3.1 has been released, which fixes connection errors with some sites; if HTTP/3 connections failed, the fallback is now handled more gracefully.

openSUSE: 2025:15582-1 moderate: tree-sitter-ruby-0.23.1-2.1

28.09.2025 04:50 An update that solves 2 vulnerabilities can now be installed.

openSUSE: 2025:15580-1 moderate: postgresql17-17.6-2.1

28.09.2025 04:50 An update that solves 18 vulnerabilities can now be installed.

openSUSE: 2025:15578-1 moderate: chromedriver-140.0.7339.207-1.1

28.09.2025 04:50 An update that solves 7 vulnerabilities can now be installed.

Debian LTS: DLA-4312-1: squid security update

27.09.2025 23:01 Three security issues were discovered in the Squid proxy caching server, which could result in the execution of arbitrary code, information disclosure or denial of service.

Fedora 42: chromium 2025-6d1ba4a93e

27.09.2025 12:30 Update to 140.0.7339.207 * CVE-2025-10890: Side-channel information leakage in V8 * CVE-2025-10891: Integer overflow in V8 * CVE-2025-10892: Integer overflow in V8

Fedora 42: firebird 2025-d24499a627

27.09.2025 12:30 4.0.6.3221

Fedora 43: chromium 2025-c161defb4d

27.09.2025 07:11 Update to 140.0.7339.207 * CVE-2025-10890: Side-channel information leakage in V8 * CVE-2025-10891: Integer overflow in V8 * CVE-2025-10892: Integer overflow in V8

Debian: DSA-6012-1: nncp

27.09.2025 07:11 Eugene Medvedev discovered that nncp, a package facilitating secure store-and-forward file and mail exchange, was susceptible to path traversal with the freq and file commands.

openSUSE: 2025:0373-1 moderate: tor

27.09.2025 07:11 An update that fixes one vulnerability is now available.

SUSE: 2025:03383-1 important: kernel

27.09.2025 07:11 * bsc#1234896 * bsc#1244824 * bsc#1245970 * bsc#1246473 * bsc#1246911

SUSE: 2025:03384-1 important: kernel

27.09.2025 07:11 * bsc#1229334 * bsc#1238954 * bsc#1240799 * bsc#1241433 * bsc#1242780

Reklama

Srdcetvor.cz - handmade

srdcetvor-handmade.png Nákupní galerie rukodělných výrobků, služeb a materiálů. Můžete si zde otevřít svůj obchod a začít prodávat nebo jen nakupovat.

Lavivasex.cz - erotické pomůcky

lavivasex.png Přehled erotických pomůcek od elegantních vibrátorů, hraček pro páry až po stimulační oleje, afrodiziaka a BDSM pomůcky.

Hledej-hosting.cz - webhosting, VPS hosting

hledej-hosting.png Přehled webhostingových, multihosting a VPS hosting programů s možností jejich pokročilého vyhledávání a porovnávání. Najděte si jednoduše vhodný hosting.