OPENSUSE-SU-2025:15838-1 python311-tornado6-6.5.4-1.1 on GA media

These are all security issues fixed in the python311-tornado6-6.5.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15835-1 duc-1.4.6-1.1 on GA media

These are all security issues fixed in the duc-1.4.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15836-1 kernel-devel-6.18.2-1.1 on GA media

These are all security issues fixed in the kernel-devel-6.18.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15833-1 MozillaFirefox-146.0.1-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-146.0.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15834-1 busybox-1.37.0-8.1 on GA media

These are all security issues fixed in the busybox-1.37.0-8.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15837-1 php8-8.4.16-1.1 on GA media

These are all security issues fixed in the php8-8.4.16-1.1 package on the GA media of openSUSE Tumbleweed...

PYSEC-2025-125

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0, if an arbitrary path is specified in the request body's fspath, the server serializes the Flow object into JSON and creates/overwrites a file at that path. There is no path restriction,...

OPENSUSE-SU-2025:20172-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50253: bpf: make sure skb-len != 0 when redirecting to a tunneling device bsc1249912. - CVE-2025-37916: pdscore: remove write-after-free of clientid bsc1243474. -...

SUSE-SU-2026:20015-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50253: bpf: make sure skb-len != 0 when redirecting to a tunneling device bsc1249912. - CVE-2025-37916: pdscore: remove write-after-free of clientid bsc1243474. -...

WatchGuard Warns of Active Exploitation of Critical Fireware OS VPN Vulnerability

WatchGuard has released fixes to address a critical security flaw in Fireware OS that it said has been exploited in real-world attacks. Tracked as CVE-2025-14733 CVSS score: 9.3, the vulnerability has been described as a case of out-of-bounds write affecting the iked process that could allow a...

SUSE-SU-2025:4490-1 Security update for xen

This update for xen fixes the following issues: Update to Xen 4.17.6. Security issues fixed: - CVE-2025-58149: incorrect removal of permissions on PCI device unplug allows PV guests to access memory of devices no longer assigned to them bsc1252692. Other issues fixed: - Several upstream bug fixes...

Security update for netty

This update for netty fixes the following issues: Update to upstream version 4.1.130. Security issues fixed: CVE-2025-67735: lack of URI sanitization in HttpRequestEncoder allows for CRLF injection through a request URI and can lead to request smuggling bsc1255048. Other updates and bugfixes:...

SUSE-SU-2025:4489-1 Security update for netty

This update for netty fixes the following issues: Update to upstream version 4.1.130. Security issues fixed: - CVE-2025-67735: lack of URI sanitization in HttpRequestEncoder allows for CRLF injection through a request URI and can lead to request smuggling bsc1255048. Other updates and bugfixes: -...

Fedora 43 : php (2025-7e9290d67f)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-7e9290d67f advisory. PHP version 8.4.16 18 Dec 2025 Core: Sync all boost.context files with release 1.86.0. mvorisek Fixed bug GH-20435 SensitiveParameter doesn't work f...

openSUSE 15 : Security update 5.0.6 for Multi-Linux Manager Client Tools (SUSE-SU-2025:4458-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4458-1 advisory. dracut-saltboot: - Update to version 1.0.0 Reboot on salt key timeout bsc1237495 Fixed parsing files with space in the name bsc1252100 grafana was...

OPENSUSE-SU-2025:15830-1 alloy-1.12.0-2.1 on GA media

These are all security issues fixed in the alloy-1.12.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15829-1 ImageMagick-7.1.2.10-2.1 on GA media

These are all security issues fixed in the ImageMagick-7.1.2.10-2.1 package on the GA media of openSUSE Tumbleweed...

FreeBSD : chromium -- multiple security fixes (f99e70c2-dcb8-11f0-a15a-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the f99e70c2-dcb8-11f0-a15a-a8a1599412c6 advisory. Chrome Releases reports: This update includes 2 security fixes: Tenable has extracted the...

SUSE SLES15: python3-salt / salt / salt-api / salt-bash-completion / salt-cloud / etc (SUSE-SU-2025:4475-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4475-1 advisory. - Security issues fixed: - CVE-2025-62349: Added minimumauthversion to enforce security bsc1254257 - CVE-2025-62348: Fixed Junos...

SUSE SLES15 / openSUSE 15 Security Update : golang-github-prometheus-alertmanager (SUSE-SU-2025:4481-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:4481-1 advisory. - Update to version 0.28.1 jscPED-13285: Improved performance of inhibition rules when using Equal labels. Improve the documentation on...