[SECURITY] Fedora 43 Update: kea-3.0.2-1.fc43

DHCP implementation from Internet Systems Consortium, Inc. that features fully functional DHCPv4, DHCPv6 and Dynamic DNS servers. Both DHCP servers fully support server discovery, address assignment, renewal, rebinding and release. The DHCPv6 server supports prefix delegation. Both servers suppor...

CVE-2025-48983

A vulnerability in the Mount service of Veeam Backup & Replication, which allows for remote code execution RCE on the Backup infrastructure hosts by an authenticated domain user...

CVE-2025-48984

A vulnerability allowing remote code execution RCE on the Backup Server by an authenticated domain user...

PT-2025-44722

Name of the Vulnerable Software and Affected Versions OpenSMTPD affected versions not specified Description The software is susceptible to a denial-of-service condition through the use of a UNIX domain socket. The issue involves a potential for disruption of service. Recommendations At the moment...

Fedora 43 : unbound (2025-16df491a66)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-16df491a66 advisory. Update to 1.24.1 - Enables DNS over QUIC server in unbound - Fix CVE-2025-11411, possible domain hijacking attack, reported by Yuxiao Wu, Yunyi Zhang, Baojun...

MGASA-2025-0254 Updated bind packages fix security vulnerabilities

Resource exhaustion via malformed DNSKEY handling CVE-2025-8677. Cache poisoning attacks with unsolicited RRs CVE-2025-40778. Cache poisoning due to weak PRNG CVE-2025-40780...

EUVD-2025-37365

When using domain users as BRAIN2 users, communication with Active Directory services is unencrypted. This can lead to the interception of authentication data and compromise confidentiality...

Security update for bind

This update for bind fixes the following issues: Upgrade to release 9.20.15: CVE-2025-8677: DNSSEC validation fails if matching but invalid DNSKEY is found bsc1252378. CVE-2025-40778: Address various spoofing attacks bsc1252379. CVE-2025-40780: Cache-poisoning due to weak pseudo-random number...

SUSE-SU-2025:3903-1 Security update for bind

This update for bind fixes the following issues: Upgrade to release 9.20.15: - CVE-2025-8677: DNSSEC validation fails if matching but invalid DNSKEY is found bsc1252378. - CVE-2025-40778: Address various spoofing attacks bsc1252379. - CVE-2025-40780: Cache-poisoning due to weak pseudo-random numb...

CVE-2025-12508

When using domain users as BRAIN2 users, communication with Active Directory services is unencrypted. This can lead to the interception of authentication data and compromise confidentiality...

CVE-2025-12508

CVE-2025-12508 affects BRAIN2: when domain users act as BRAIN2 users, communication with Active Directory services is unencrypted, risking interception of authentication data and confidentiality. Documents consistently identify BRAIN2 as the affected software and describe the unencrypted AD traff...

CVE-2025-12508 Unencrypted communication to Active Directory services

When using domain users as BRAIN2 users, communication with Active Directory services is unencrypted. This can lead to the interception of authentication data and compromise confidentiality...

CVE-2025-12508 Unencrypted communication to Active Directory services

When using domain users as BRAIN2 users, communication with Active Directory services is unencrypted. This can lead to the interception of authentication data and compromise confidentiality...

Malicious code in sechub-openapi-ts-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbfa8eb5cccd4e8e722c4df1147efab7d4c4084b31710e417b10b87bf1d63267 The package sechub-openapi-ts-client was found to contain malicious code. Source: ghsa-malware...

Malicious code in sechub-openapi-typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa5b3dc481ba626b038be55ed5cb344e32dc983f53f2b83fc1b9f6293a3a493 The package sechub-openapi-typescript was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49307 Malicious code in sechub-openapi-typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa5b3dc481ba626b038be55ed5cb344e32dc983f53f2b83fc1b9f6293a3a493 The package sechub-openapi-typescript was found to contain malicious code. Source: ghsa-malware...

Malicious code in kubeflow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3150469110dc3e3086ca34f822bec2df638b48510698b298219a1f7f402680c3 The package kubeflow was found to contain malicious code. Source: ghsa-malware dd99a9b554f60504a7d93b59d2a89050acc67db75c799deeacfa3b33019dd7be Any...

MAL-2025-49304 Malicious code in kubeflow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3150469110dc3e3086ca34f822bec2df638b48510698b298219a1f7f402680c3 The package kubeflow was found to contain malicious code. Source: ghsa-malware dd99a9b554f60504a7d93b59d2a89050acc67db75c799deeacfa3b33019dd7be Any...

Malicious code in radial-chart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b215178ce54b5e31d5c917df96511b7b52a43e5b5554a6967eab33ae9888aa54 The package radial-chart was found to contain malicious code. Source: ghsa-malware c4804c38b473d0e81fd8afd180f2becce5f6699de1dc16639a2be5c5f8d58678 A...

MAL-2025-49305 Malicious code in radial-chart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b215178ce54b5e31d5c917df96511b7b52a43e5b5554a6967eab33ae9888aa54 The package radial-chart was found to contain malicious code. Source: ghsa-malware c4804c38b473d0e81fd8afd180f2becce5f6699de1dc16639a2be5c5f8d58678 A...