Amazon Linux 2 : squid, --advisory ALAS2-2025-3027 (ALAS-2025-3027)

The version of squid installed on the remote host is prior to 3.5.20-17. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3027 advisory. Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asnbuildobjid in lib/snmplib/asn1.c. CVE-2025-59362...

Amazon Linux 2 : open-vm-tools, --advisory ALAS2-2025-3036 (ALAS-2025-3036)

The version of open-vm-tools installed on the remote host is prior to 12.3.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3036 advisory. VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with...

[SECURITY] Fedora 43 Update: rust-protobuf-3.7.2-1.fc43

Rust implementation of Google protocol buffers...

EUVD-2025-34160

A vulnerability has been identified in SIMATIC CP 1542SP-1 6GK7542-6UX00-0XE0 All versions V2.4.24, SIMATIC CP 1542SP-1 IRC 6GK7542-6VX00-0XE0 All versions V2.4.24, SIMATIC CP 1543SP-1 6GK7543-6WX00-0XE0 All versions V2.4.24, SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL 6AG2542-6VX00-4XE0 All versions...

PT-2025-41975

A prompt injection vulnerability exists in Windsurft version 1.10.7 in Write mode using SWE-1 model. It is possible to create a file name that will be appended to the user prompt causing Windsurf to follow its instructions...

DLA-4331-1 https-everywhere - security update

Bulletin has no description...

SUSE SLES15: kernel-livepatch-6_4_0-150600_23_47-default / etc (SUSE-SU-2025:03572-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03572-1 advisory. This update for the Linux Kernel 6.4.0-1506002347 fixes several issues. The following security issues were fixed: - CVE-2025-38477: net/sched:...

Debian: Security Advisory (DLA-4330-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2025:03547-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DLA-4330-1 ghostscript - security update

Bulletin has no description...

CVE-2025-49844 affecting package valkey for versions less than 8.0.6-1

CVE-2025-49844 affecting package valkey for versions less than 8.0.6-1. A patched version of the package is available...

Malicious Package

Overview mad-8.2.1.2.2.8 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

DLA-4329-1 libfcgi - security update

Bulletin has no description...

DLA-4327-1 linux - security update

Bulletin has no description...

SUSE SLES15 Security Update : podofo (SUSE-SU-2025:03533-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2025:03533-1 advisory. - fixed a free-after-use in PdfTokenizer bsc1249105 Tenable has extracted the preceding description block directly from the SUSE security advisory. No...

CVE-2025-21048

Relative path traversal in Knox Enterprise prior to SMR Oct-2025 Release 1 allows local attackers to execute arbitrary code...

CVE-2025-21044

Out-of-bounds write in fingerprint trustlet prior to SMR Oct-2025 Release 1 allows local privileged attackers to write out-of-bounds memory...

[SECURITY] Fedora 41 Update: docker-buildkit-0.25.0-1.fc41

Concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit...

[SECURITY] Fedora 41 Update: wordpress-6.8.3-1.fc41

Wordpress is an online publishing / weblog package that makes it very easy, almost trivial, to get information out to people on the web. Important information in /usr/share/doc/wordpress/README.fedora...

[SECURITY] Fedora 42 Update: wordpress-6.8.3-1.fc42

Wordpress is an online publishing / weblog package that makes it very easy, almost trivial, to get information out to people on the web. Important information in /usr/share/doc/wordpress/README.fedora...