CLSA-2025-1766049566 Update of buildah

Bump release version to 2:1.39.6-1.tuxcare.els3...

CLSA-2025-1765545248 Update of ImageMagick

Bump release to 6.9.10.68-7.0.3.tuxcare.els1...

Linux Distros Unpatched Vulnerability : CVE-2025-40278

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: sched: actife: initialize struct tcife to fix KMSAN kernel-infoleak Fix a KMSAN kernel-infoleak detected by the syzbot . net? KMSAN: kernel-infoleak in...

CLSA-2025-1764850038 Update of emacs

Bump release to 23.0.1.1.tuxcare.els1...

Oracle Linux 10 : libsoup3 (ELSA-2025-21032)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-21032 advisory. 3.6.5-6 - Fix integer overflow in date/time parsing 3.6.5-5 - Bump revision number 3.6.5-4 - Fix several CVEs Tenable has extracted the preceding...

SUSE SLES12: grub2 / grub2-i386-pc / grub2-snapper-plugin / etc (SUSE-SU-2025:4197-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4197-1 advisory. - CVE-2025-54771: Fixed rubfileclose does not properly controls the fs refcount bsc1252931 - CVE-2025-61661: Fixed out-of-bounds write in...

Security update for grub2

This update for grub2 fixes the following issues: CVE-2025-54771: Fixed rubfileclose does not properly controls the fs refcount bsc1252931 CVE-2025-61661: Fixed out-of-bounds write in grubusbgetstring function bsc1252932 CVE-2025-61662: Fixed missing unregister call for gettext command may lead t...

Security update for grub2

This update for grub2 fixes the following issues: CVE-2025-54771: Fixed rubfileclose does not properly controls the fs refcount bsc1252931 CVE-2025-61662: Fixed missing unregister call for gettext command may lead to use-after-free bsc1252933 CVE-2025-61663: Fixed missing unregister call for norm...

SUSE-SU-2025:4152-1 Security update for grub2

This update for grub2 fixes the following issues: - CVE-2025-54771: Fixed rubfileclose does not properly controls the fs refcount bsc1252931 - CVE-2025-61662: Fixed missing unregister call for gettext command may lead to use-after-free bsc1252933 - CVE-2025-61663: Fixed missing unregister call fo...

Security update for grub2

This update for grub2 fixes the following issues: CVE-2025-54771: Fixed rubfileclose does not properly controls the fs refcount bsc1252931 CVE-2025-61661: Fixed out-of-bounds write in grubusbgetstring function bsc1252932 CVE-2025-61662: Fixed missing unregister call for gettext command may lead t...

SUSE-SU-2025:4143-1 Security update for grub2

This update for grub2 fixes the following issues: - CVE-2025-54771: Fixed rubfileclose does not properly controls the fs refcount bsc1252931 - CVE-2025-61661: Fixed out-of-bounds write in grubusbgetstring function bsc1252932 - CVE-2025-61662: Fixed missing unregister call for gettext command may...

CLSA-2025-1763059190 Update of gnutls

Bump the version...

Malicious code in yuda-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a8344478dd73acd6806529eadcb22a8323ac6ad0dd1ac9b71a9f6d3208a8539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142941 Malicious code in global-leda-xenon-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 711449061c304954070a6e0690741a6de984afff904bc2f2fe9f6e481fce0a3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145359 Malicious code in neptune-eridanus-jabbah-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf8e91c6a667fe241fd67d4152b461ba2a0c007607acea3a94c86dcbddc4247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fundamental_quokka_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8cf4548e76985922fca610f303a63cced4b11d10c46c64a1cd97c7ce7bd0476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-saguer77-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb011856af81d079928eb98f0f220ff817cbd0346bf2e2038df666c911c4b94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121070 Malicious code in joko-ketoprak31-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 332de84764a468a599484f59485797e7a54f8d0284f45e97840338114dd44dae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118466 Malicious code in zaki-tek98-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5728e234c9dee35bf967eed06a7f87c51e34fdd560cf639c9fcd9b1ca194847 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105978 Malicious code in mosley-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3f54f9021e6947c90e9fc17198ee6a2dfbcf924569bfc1c5c5cacc450e18ad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...