28417 matches found
Fedora 42 : moby-engine (2025-2f6ca95a74)
The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-2f6ca95a74 advisory. - Update to release v29.1.3 - Resolves: rhbz2417969 - Resolves CVE-2024-25621: rhbz2419019, rhbz2419046, rhbz2419442 - Upstream new features and fix...
OPENSUSE-SU-2025:15840-1 python315-3.15.0~a3-1.1 on GA media
These are all security issues fixed in the python315-3.15.0a3-1.1 package on the GA media of openSUSE Tumbleweed...
nodejs:18 security, bug fix, and enhancement update
An update is available for nodejs-packaging, module.nodejs-nodemon, module.nodejs-packaging, nodejs-nodemon. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list...
OPENSUSE-SU-2025:15838-1 python311-tornado6-6.5.4-1.1 on GA media
These are all security issues fixed in the python311-tornado6-6.5.4-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15835-1 duc-1.4.6-1.1 on GA media
These are all security issues fixed in the duc-1.4.6-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15837-1 php8-8.4.16-1.1 on GA media
These are all security issues fixed in the php8-8.4.16-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15833-1 MozillaFirefox-146.0.1-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-146.0.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15834-1 busybox-1.37.0-8.1 on GA media
These are all security issues fixed in the busybox-1.37.0-8.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15836-1 kernel-devel-6.18.2-1.1 on GA media
These are all security issues fixed in the kernel-devel-6.18.2-1.1 package on the GA media of openSUSE Tumbleweed...
PYSEC-2025-125
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0, if an arbitrary path is specified in the request body's fspath, the server serializes the Flow object into JSON and creates/overwrites a file at that path. There is no path restriction,...
OPENSUSE-SU-2025:20172-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50253: bpf: make sure skb-len != 0 when redirecting to a tunneling device bsc1249912. - CVE-2025-37916: pdscore: remove write-after-free of clientid bsc1243474. -...
SUSE-SU-2026:20015-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50253: bpf: make sure skb-len != 0 when redirecting to a tunneling device bsc1249912. - CVE-2025-37916: pdscore: remove write-after-free of clientid bsc1243474. -...
WatchGuard Warns of Active Exploitation of Critical Fireware OS VPN Vulnerability
WatchGuard has released fixes to address a critical security flaw in Fireware OS that it said has been exploited in real-world attacks. Tracked as CVE-2025-14733 CVSS score: 9.3, the vulnerability has been described as a case of out-of-bounds write affecting the iked process that could allow a...
SUSE-SU-2025:4490-1 Security update for xen
This update for xen fixes the following issues: Update to Xen 4.17.6. Security issues fixed: - CVE-2025-58149: incorrect removal of permissions on PCI device unplug allows PV guests to access memory of devices no longer assigned to them bsc1252692. Other issues fixed: - Several upstream bug fixes...
Security update for netty
This update for netty fixes the following issues: Update to upstream version 4.1.130. Security issues fixed: CVE-2025-67735: lack of URI sanitization in HttpRequestEncoder allows for CRLF injection through a request URI and can lead to request smuggling bsc1255048. Other updates and bugfixes:...
SUSE-SU-2025:4489-1 Security update for netty
This update for netty fixes the following issues: Update to upstream version 4.1.130. Security issues fixed: - CVE-2025-67735: lack of URI sanitization in HttpRequestEncoder allows for CRLF injection through a request URI and can lead to request smuggling bsc1255048. Other updates and bugfixes: -...
openSUSE 15 : Security update 5.0.6 for Multi-Linux Manager Client Tools (SUSE-SU-2025:4458-1)
The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4458-1 advisory. dracut-saltboot: - Update to version 1.0.0 Reboot on salt key timeout bsc1237495 Fixed parsing files with space in the name bsc1252100 grafana was...
Fedora 43 : php (2025-7e9290d67f)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-7e9290d67f advisory. PHP version 8.4.16 18 Dec 2025 Core: Sync all boost.context files with release 1.86.0. mvorisek Fixed bug GH-20435 SensitiveParameter doesn't work f...