[SECURITY] [DLA 4354-1] pypy3 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4354-1 [email protected] https://www.debian.org/lts/security/ Andrej Shadura October 31, 2025 https://wiki.debian.org/LTS -...

Security update for the Linux Kernel RT (Live Patch 13 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-1506001044 fixes several issues. The following security issues were fixed: CVE-2025-38664: ice: Fix a null pointer dereference in icecopyandinitpkg bsc1248631. CVE-2025-38617: net/packet: fix a race in packetsetring and packetnotifier bsc1249208...

OPENSUSE-SU-2025:15692-1 java-1_8_0-openj9-1.8.0.472-1.1 on GA media

These are all security issues fixed in the java-180-openj9-1.8.0.472-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15690-1 java-11-openj9-11.0.29.0-1.1 on GA media

These are all security issues fixed in the java-11-openj9-11.0.29.0-1.1 package on the GA media of openSUSE Tumbleweed...

Oracle Linux 9 : redis:7 (ELSA-2025-19345)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19345 advisory. 7.2.11-1.0.1 - Build with 64k pages to support redis on UEK on aarch64 7.2.11-1 - rebase to 7.2.11 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818...

OPENSUSE-SU-2025:15694-1 java-25-openj9-25.0.1.0-1.1 on GA media

These are all security issues fixed in the java-25-openj9-25.0.1.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15693-1 java-21-openj9-21.0.9.0-1.1 on GA media

These are all security issues fixed in the java-21-openj9-21.0.9.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15689-1 gomuks-0.3.1-2.1 on GA media

These are all security issues fixed in the gomuks-0.3.1-2.1 package on the GA media of openSUSE Tumbleweed...

FreeBSD : chromium -- multiple security fixes (7c09fcb7-b5d6-11f0-b3f7-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 7c09fcb7-b5d6-11f0-b3f7-a8a1599412c6 advisory. Chrome Releases reports: This update includes 20 security fixes: Tenable has extracted the...

EUVD-2025-37202

IBM Sterling Connect Direct for Unix 6.2.0.7 through 6.2.0.9 iFix004, 6.4.0.0 through 6.4.0.2 iFix001, and 6.3.0.2 through 6.3.0.5 iFix002 incorrectly assigns permissions for maintenance tasks to Control Center Director CCD users that could allow a privileged user to escalate their privileges...

USN-7853-2 linux-fips, linux-aws-fips, linux-gcp-fips vulnerabilities

Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this t...

Moderate: Red Hat Security Advisory: RHACS 4.8.5 security and bug fix update

Updated images are now available for Red Hat Advanced Cluster Security RHACS, which typically include new features, bug fixes, and/or security patches. See the release notes link in the references section for a description of the fixes and enhancements in this particular release...

Important: Red Hat Security Advisory: multicluster engine for Kubernetes 2.9.1 security update

The multicluster engine for Kubernetes 2.9 General Availability release images, which add new features and enhancements, bug fixes, and updated container images. The multicluster engine for Kubernetes v2.9 images The multicluster engine for Kubernetes provides the foundational components that are...

Fedora 41 : bind / bind-dyndb-ldap (2025-10c407da27)

The remote Fedora 41 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2025-10c407da27 advisory. Update to 9.18.41 rhbz2405786 Security fixes: - DNSSEC validation fails if matching but invalid DNSKEY is found. CVE-2025-8677 - Address various...

redis:6 security update

6.2.20-1.0.1 - Build with 64k pages to support redis on both UEK6 and UEK7 on aarch64 6.2.20-1 - rebase to 6.2.20 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819...

Virtuozzo Hybrid Infrastructure 7.1 Hotfix 1 (7.1.0-187)

This update provides important security fixes. Vulnerability id: VSTOR-89294 A fix for volume attachment. Vulnerability id: VSTOR-107377 Failed to move domains to a mount point during an update. Vulnerability id: VSTOR-111693 A stability fix for QEMU. Vulnerability id: VSTOR-115326 Failed to set...

OPENSUSE-SU-2025:15688-1 libmozjs-140-0-140.4.0-2.1 on GA media

These are all security issues fixed in the libmozjs-140-0-140.4.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15687-1 chromedriver-142.0.7444.59-2.1 on GA media

These are all security issues fixed in the chromedriver-142.0.7444.59-2.1 package on the GA media of openSUSE Tumbleweed...

Fedora 42 : bind / bind-dyndb-ldap (2025-92566203fd)

The remote Fedora 42 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2025-92566203fd advisory. Update to 9.18.41 rhbz2405786 Security fixes: - DNSSEC validation fails if matching but invalid DNSKEY is found. CVE-2025-8677 - Address various...

CVE-2025-58183

tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a...