RLSA-2025:8667 Moderate: grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: net/http: Request smuggling due to acceptance of invalid chunked data in net/http CVE-2025-22871 For more details about the security issues, including the impact, a CVSS...

git security update

An update is available for git. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Git is a distributed revision control system with a decentralized architecture. A...

nodejs:22 security update

An update is available for module.nodejs-nodemon, nodejs, nodejs-nodemon, nodejs-packaging, module.nodejs, module.nodejs-packaging. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

expat security update

An update is available for expat. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Expat is a C library for parsing XML documents. Security Fixes: libexpat: expat...

CVE-2025-53082

creationtimestamp| type| source ---|---|--- 2025-07-29 09:29:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv3s7z6dq72t 2025-07-29 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-210-02...

BELL-CVE-2025-38471

Bulletin has no description...

CVE-2025-41240

creationtimestamp| type| source ---|---|--- 2025-07-29 03:42:58+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lv36u576qk2r 2026-05-25 05:09:38+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mmnpldce4l2m...

PT-2025-31268 · Iwasm +1 · Iwasm +1

Name of the Vulnerable Software and Affected Versions: WebAssembly Micro Runtime WAMR iwasm versions 2.4.0 and below Description: The iwasm package uses the --addr-pool option with an IPv4 address lacking a subnet mask. This configuration allows the system to accept all IP addresses, potentially...

PT-2025-31253 · Ibm · Ibm Db2 For Linux +1

Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 10.5.0 through 10.5.0.11 IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 11.1.0 through 11.1.4.7 IBM Db2 for Linux, UNIX and Windows includes Db...

PT-2025-31177 · Vmware · Vmware Server

Name of the Vulnerable Software and Affected Versions: VMware Server affected versions not specified Description: The vulnerability has been rejected as not used. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2025-31178 · Google · Google Maps

Name of the Vulnerable Software and Affected Versions: Google Maps affected versions not specified Description: The reported issue concerns a rejected reason related to Google Maps. The reason for rejection is stated as "Not used". Recommendations: At the moment, there is no information about a...

PT-2025-31203 · Logic +1 · Logic +1

Name of the Vulnerable Software and Affected Versions: Vivaldi United Group iCONTROL+ Server versions 4.7.8.0.eden Logic 5.32 and earlier Description: A cross-site scripting issue exists in Vivaldi United Group iCONTROL+ Server. This allows attackers to inject JavaScript payloads into the error o...

Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, is affected by a security bypass vulnerability (CVE-2024-56339)

Summary IBM Webphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, is affected by a security bypass caused by a failure to honor security configuration. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Product...

WordPress Brizy plugin <= 2.6.20 - Missing Authorization to Unauthenticated Limited File Upload vulnerability

Missing Authorization to Unauthenticated Limited File Upload vulnerability discovered by mikemyers in WordPress Plugin Brizy versions = 2.6.20...

CVE-2025-54419

A SAML library not dependent on any frameworks that runs in Node. In version 5.0.1, Node-SAML loads the assertion from the unsigned original response document. This is different than the parts that are verified when checking signature. This allows an attacker to modify authentication details with...

CVE-2025-54298

creationtimestamp| type| source ---|---|--- 2025-07-28 19:58:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv2ewg5f6l2j...

CVE-2025-54419

CVE-2025-54419 – Node-SAML (Node.js) : Affected component is the node-saml library. In v5.0.1, it loads the SAML assertion from the unsigned original response document, separate from the parts that are verified for signature. This mismatch allows an attacker who has a validly signed IdP document ...

CVE-2025-54419 Node-SAML Contains SAML Signature Verification Vulnerability

A SAML library not dependent on any frameworks that runs in Node. In version 5.0.1, Node-SAML loads the assertion from the unsigned original response document. This is different than the parts that are verified when checking signature. This allows an attacker to modify authentication details with...

CVE-2025-38493

In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Fix crash in timerlatdumpstack We have observed kernel panics when using timerlat with stack saving, with the following dmesg output: memcpy: detected buffer overflow: 88 byte write of buffer size 0 WARNING: CPU:...

CVE-2025-54369

creationtimestamp| type| source ---|---|--- 2025-07-28 13:59:53+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3luzque5p7k2y 2025-07-30 04:40:08+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3lv5sj6f27c2b...