161 matches found
Security update for elemental-operator
This update for elemental-operator fixes the following issues: Updated to v1.7.2: Updated header year CVE-2025-22870: golang.org/x/net/proxy: Fixed proxy bypass using IPv6 zone IDs bsc1238700 CVE-2025-22869: golang.org/x/crypto/ssh: Fixed Denial of Service in the Key Exchange of...
Fedora 41 : kappanhang (2025-eecb0ea534)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-eecb0ea534 advisory. Update to git snapshot dffb773 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
Fedora 40 : golang-github-openprinting-ipp-usb (2025-2280949271)
The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-2280949271 advisory. rebuild with new golang to fix CVE-2025-22870 fedora2352013 Tenable has extracted the preceding description block directly from the Fedora security...
CVE-2025-22870 affecting package prometheus for versions less than 2.45.4-12
CVE-2025-22870 affecting package prometheus for versions less than 2.45.4-12. A patched version of the package is available...
Fedora: Security Advisory (FEDORA-2025-f974cb8ce5)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-22870 affecting package packer for versions less than 1.9.5-8
CVE-2025-22870 affecting package packer for versions less than 1.9.5-8. A patched version of the package is available...
CVE-2025-22870 affecting package influxdb for versions less than 2.7.5-3
CVE-2025-22870 affecting package influxdb for versions less than 2.7.5-3. A patched version of the package is available...
SUSE-SU-2025:20196-1 Security update for helm
This update for helm fixes the following issues: - Update to version 3.17.2 bsc1238688, CVE-2025-22870: Updating to 0.37.0 for x/net builddeps: bump the k8s-io group with 7 updates - Update to version 3.17.1: merge null child chart objects builddeps: bump the k8s-io group with 7 updates fix: chec...
Security update for helm
This update for helm fixes the following issues: Update to version 3.17.2 bsc1238688, CVE-2025-22870: Updating to 0.37.0 for x/net builddeps: bump the k8s-io group with 7 updates Update to version 3.17.1: merge null child chart objects builddeps: bump the k8s-io group with 7 updates fix: check...
SUSE-SU-2025:20278-1 Security update for helm
This update for helm fixes the following issues: - Update to version 3.17.2 bsc1238688, CVE-2025-22870: Updating to 0.37.0 for x/net builddeps: bump the k8s-io group with 7 updates - Update to version 3.17.1: merge null child chart objects builddeps: bump the k8s-io group with 7 updates fix: chec...
Security update for helm
This update for helm fixes the following issues: Update to version 3.17.2 bsc1238688, CVE-2025-22870: Updating to 0.37.0 for x/net builddeps: bump the k8s-io group with 7 updates Update to version 3.17.1: merge null child chart objects builddeps: bump the k8s-io group with 7 updates fix: check...
CVE-2025-22870 affecting package keda for versions less than 2.14.1-6
CVE-2025-22870 affecting package keda for versions less than 2.14.1-6. A patched version of the package is available...
CVE-2025-22870 affecting package azcopy for versions less than 10.25.1-4
CVE-2025-22870 affecting package azcopy for versions less than 10.25.1-4. A patched version of the package is available...
OESA-2025-1427 golang security update
. Security Fixes: Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NOPROXY environment variable is set to ".example.com", a request to "::1%25.example.com:80 will incorrectly match and not be proxied.CVE-2025-22870...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : cosign (SUSE-SU-2025:1333-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1333-1 advisory. - CVE-2024-6104: cosign: hashicorp/go-retryablehttp: Fixed sensitive information disclosure to l...
CVE-2025-22870 affecting package git-lfs for versions less than 3.6.1-2
CVE-2025-22870 affecting package git-lfs for versions less than 3.6.1-2. A patched version of the package is available...
CVE-2025-22870 affecting package prometheus-process-exporter for versions less than 0.8.2-2
CVE-2025-22870 affecting package prometheus-process-exporter for versions less than 0.8.2-2. A patched version of the package is available...
CVE-2025-22870 affecting package prometheus-node-exporter for versions less than 1.7.0-3
CVE-2025-22870 affecting package prometheus-node-exporter for versions less than 1.7.0-3. A patched version of the package is available...