OPENSUSE-SU-2025:15471-1 ImageMagick-7.1.2.1-1.1 on GA media

These are all security issues fixed in the ImageMagick-7.1.2.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15480-1 keylime-ima-policy-0.2.8+12-1.1 on GA media

These are all security issues fixed in the keylime-ima-policy-0.2.8+12-1.1 package on the GA media of openSUSE Tumbleweed...

TencentOS Server 4: java-21-konajdk (TSSA-2025:0665)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0665 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-140.2.0esr-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For...

Security update for the Linux Kernel (Live Patch 55 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059198 fixes several issues. The following security issues were fixed: CVE-2025-38494: HID: core: do not bypass hidhwrawrequest bsc1247350. CVE-2025-38495: HID: core: ensure the allocated report buffer can contain the reserved report ID bsc1247351...

Important: Red Hat Security Advisory: tomcat security update

An update for tomcat is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Syst...

K000153092: Apache Tomcat vulnerabilities CVE-2025-52520 and CVE-2025-49125

Security Advisory Description CVE-2025-52520 For some unlikely configurations of multipart upload, an Integer Overflow vulnerability in Apache Tomcat could lead to a DoS via bypassing of size limits. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.8, from 10.1.0-M1 through 10.1.42,...

CLSA-2025-1755682686 kernel: Fix of 10 CVEs

netsched: hfsc: Fix a UAF vulnerability in class handling CVE-2025-37797 - sunrpc: handle SVCGARBAGE during svc auth processing as auth error CVE-2025-38089 - net: ch9200: fix uninitialised access during miinwayrestart CVE-2025-38086 - ext4: fix out-of-bound read in ext4xattrinodedecrefall...

ROOT-OS-DEBIAN-11-CVE-2025-4373 CVE-2025-4373 in rootio-glib2.0 - Patched by Root

Root has patched CVE-2025-4373 in the rootio-glib2.0 package for Root:Debian:11. Multiple fixed versions available...

CLSA-2025-1755681456 kernel: Fix of 2 CVEs

can: bcm: Fix UAF in bcmprocshow CVE-2023-52922 - udmabuf: fix a buf size overflow issue during udmabuf creation CVE-2025-37803...

SUSE-SU-2025:02923-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2019-11135: TSX Asynchronous Abort condition bsc1139073. - CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL...

Linux Distros Unpatched Vulnerability : CVE-2022-2068

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In addition to the crehash shell command injection identified in CVE-2022-1292, further circumstances where the crehash script does not properly sanitise shell...

Oracle Linux 8 : mingw-sqlite (ELSA-2025-14101)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-14101 advisory. - Fix CVE-2019-5827 CVE-2019-13750 CVE-2019-13751 - Fix CVE-2019-19603 CVE-2020-13435 CVE-2020-35527 - Fix CVE-2020-35525 CVE-2022-35737 CVE-2020-24736 - Fix...

OPENSUSE-SU-2025:15468-1 gdk-pixbuf-devel-2.42.12-5.1 on GA media

These are all security issues fixed in the gdk-pixbuf-devel-2.42.12-5.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15470-1 wicked2nm-1.2.1-1.1 on GA media

These are all security issues fixed in the wicked2nm-1.2.1-1.1 package on the GA media of openSUSE Tumbleweed...

Fedora 42 : libarchive (2025-47e73aaaea)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-47e73aaaea advisory. Rebase due to a lot of CVE fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Linux Distros Unpatched Vulnerability : CVE-2023-49294

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Asterisk is an open source private branch exchange and telephony toolkit. In Asterisk prior to versions 18.20.1, 20.5.1, and 21.0.1, as well as certified-asteri...

OPENSUSE-SU-2025:15467-1 firefox-esr-140.2.0-1.1 on GA media

These are all security issues fixed in the firefox-esr-140.2.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2025-34177

Name of the Vulnerable Software and Affected Versions iOS versions prior to 15.8.5 iOS versions 16.x prior to 16.7.12 iOS versions prior to 18.6.2 iPadOS versions prior to 15.8.5 iPadOS versions 16.x prior to 16.7.12 iPadOS versions 17.x prior to 17.7.10 iPadOS versions prior to 18.6.2 macOS...

Linux Distros Unpatched Vulnerability : CVE-2025-43211

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, tvOS 18....