SUSE-SU-2025:0407-1 Security update for ovmf

This update for ovmf fixes the following issues: - CVE-2023-45229: out-of-bounds read in edk2 when processing IANA/IATA options in DHCPv6 Advertise messages. bsc1218879 - CVE-2023-45230: buffer overflow in the DHCPv6 client in edk2 via a long Server ID option. bsc1218880 - CVE-2023-45231:...

ALSA-2025:1184 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7 CVE-2025-1017 firefox: thunderbird: Use-after-free in Custom Highlight CVE-2025-1010 firefox:...

Photon OS 4.0: Linux PHSA-2025-4.0-0750

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0750. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Debian: Security Advisory (DSA-5861-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2025-0045)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Photon OS 4.0: Linux PHSA-2025-4.0-0742

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0742. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Debian: Security Advisory (DLA-4044-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-25183 vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm, py3.10-vllm-cuda-11.8...

CVE-2025-22866 vulnerabilities

Vulnerabilities for packages: descheduler, kserve-modelmesh-serving, sftpgo-plugin-auth, cosign, kind, glow, q, kubeflow-pipelines, nginx-prometheus-exporter, checksec, gke-gcloud-auth-plugin, crossplane-provider-aws-ec2, supercronic, go-licenses, yace, crossplane, tfsec, crossplane-provider-azur...

CVE-2025-22866 vulnerabilities

Vulnerabilities for packages: openfga, doppler-kubernetes-operator, prometheus-redis-exporter, restic, go-md2man, karma, opentelemetry-collector-contrib-fips, helm-fips, dex, minio-operator, nvidia-nsight-compute-13.1, yace, amazon-ssm-agent, secrets-store-csi-driver-provider-azure-fips, linkerd2...

Security Bulletin: IBM Asset Data Dictionary uses multiple third party dependencies which is vulnerable to CVEs.

Summary IBM Asset Data Dictionary uses...

CVE-2024-57699 vulnerabilities

Vulnerabilities for packages: apache-nifi, opensearch, apicurio-registry, akhq, dependency-track, trino...

Moderate: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.15 security and extras update

Red Hat OpenShift Container Platform release 4.17.15 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a security impact of...

CVE-2025-0725 vulnerabilities

Vulnerabilities for packages: curl...

CVE-2025-0725 vulnerabilities

Vulnerabilities for packages: curl...

CVE-2025-0167 vulnerabilities

Vulnerabilities for packages: curl...

CVE-2025-0665

creationtimestamp| type| source ---|---|--- 2025-02-05 07:24:03+00:00| seen| https://daniel.haxx.se/blog/2025/02/05/curl-8-12-0/ 2025-02-05 08:44:35+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lhg6lcrwri23 2025-02-05 09:19:06+00:00| seen|...

CVE-2024-33024

Transient DOS while parsing the ML IE when a beacon with length field inside the common info of ML IE greater than the ML IE length...

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: scsi: core: Fix unremoved procfs host directory regression CVE-2024-26935 kernel: arm64/sve: Discard stale CPU state when handling SVE traps CVE-2024-50275 For more details about the...