2025-11 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB5068864)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

EUVD-2025-74738

Malicious code in disgustedfinchchocolate-64 npm...

EUVD-2025-74847

Malicious code in brightbarracudaolive-64 npm...

Malicious code in extended_woodpecker_cyan-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffe0ddfb60842e456ffdacc9e04a39c502509f60fbbc0862d51b9e0a11986ce9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74608

Malicious code in givenreptiletomato-64 npm...

Malicious code in verbal_wolf_teal-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fc076accf02180ad7614a80a4f6f92b5ec8ec0c222dcbc7ddd177af5d833fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74130

Malicious code in unexpectedhornetaquamarine-64 npm...

[SECURITY] Fedora 41 Update: mupen64plus-2.6.0-8.fc41

Mupen64plus is a Nintendo 64 Emulator. This package includes all the plug-ins...

[SECURITY] Fedora 42 Update: mupen64plus-2.6.0-8.fc42

Mupen64plus is a Nintendo 64 Emulator. This package includes all the plug-ins...

[SECURITY] Fedora 43 Update: mupen64plus-2.6.0-8.fc43

Mupen64plus is a Nintendo 64 Emulator. This package includes all the plug-ins...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990528)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990528 advisory. In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: tda10048: Fix integer overflow state-xtalhz can be up to 16M, so it can...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990076)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990076 advisory. In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: tda10048: Fix integer overflow state-xtalhz can be up to 16M, so it can...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-989561)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989561 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: designware: use casting of u64 in clock multiplication to avoid overflow In functions...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990249)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990249 advisory. In the Linux kernel, the following vulnerability has been resolved: ftruncate: pass a signed offset The old ftruncate syscall, using the 32-bit offt misses a sign...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-989920)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989920 advisory. In the Linux kernel, the following vulnerability has been resolved: Squashfs: fix handling and sanity checking of xattrids count A Sysbot 1 corrupted filesystem...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989563)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989563 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc: Fix virtaddrvalid for 64-bit Book3E & 32-bit mpe: On 64-bit Book3E vmalloc space starts...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: perf: Fixed the issue with sample generation and doexit operations. Baisheng Gao reported a crash in ARM64 mode. Mark interpreted this as a synchronous external abort—most likely due to attempting to access MMIO in a faulty wa...

Siemens SIMATIC Devices Incorrect Calculation of Buffer Size (CVE-2024-35988)

riscv: Fix TASKSIZE on 64-bit NOMMU. On NOMMU, userspace memory can come from anywhere in physical RAM. The current definition of TASKSIZE is wrong if any RAM exists above 4G, causing spurious failures in the userspace access routines. This plugin only works with Tenable.ot. Please visit...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2022-48828)

NFSD: Vulnerability caused by an underflow in iasize due to a mismatch between signed and unsigned 64-bit file size values, which can cause issues when handling large file sizes from NFS clients. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for...

DEBIAN-CVE-2025-40020

In the Linux kernel, the following vulnerability has been resolved: can: peakusb: fix shift-out-of-bounds issue Explicitly uses a 64-bit constant when the number of bits used for its shifting is 32 which is the case for PC CAN FD interfaces supported by this driver. mkl: update subject, apply...