Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.101 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links...

Security Bulletin: A vulnerability has been identified in IBM WebSphere Application Server used by IBM Rational ClearQuest (CVE-2025-33104)

Summary IBM WebSphere Application Server is used by the IBM Rational ClearQuest server. Information about security vulnerabilities affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...

Important: Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Jaeger) 3.5.2 release

Red Hat OpenShift distributed tracing platform Jaeger 3.5.2 has been released This release of the Red Hat OpenShift distributed tracing platform Jaeger provides security improvements. Breaking changes: Nothing Deprecations: Nothing Technology Preview features: Nothing Enhancements: Nothing Bug...

A week in security (August 4 – August 10)

Last week on Malwarebytes Labs: Adult sites trick users into Liking Facebook posts using a clickjack Trojan Facebook users targeted in ‘login’ phish TeaOnHer, the male version of Tea, is leaking personal information on its users too How Google, Adidas, and more were breached in a Salesforce scam...

Linux Distros Unpatched Vulnerability : CVE-2019-12474

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Wikimedia MediaWiki 1.23.0 through 1.32.1 has an information leak. Privileged API responses that include whether a recent change has been patrolled may be cache...

OPENSUSE-SU-2025:15432-1 gio-branding-upstream-2.84.4-1.1 on GA media

These are all security issues fixed in the gio-branding-upstream-2.84.4-1.1 package on the GA media of openSUSE Tumbleweed...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2025-20521)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20521 advisory. - perf: Fix perfeventvalidatesize lockdep splat Mark Rutland Orabug: 36261486 CVE-2023-6931 - perf: Fix perfeventvalidatesize Peter Zijlstra Orabu...

Linux Distros Unpatched Vulnerability : CVE-2021-47059

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ss - fix result memory leak on error path This patch fixes a memory leak on an...

OPENSUSE-SU-2025:15431-1 nvidia-open-driver-G06-signed-default-devel-570.172.08-2.1 on GA media

These are all security issues fixed in the nvidia-open-driver-G06-signed-default-devel-570.172.08-2.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-54888

Fedify vulnerability CVE-2025-54888 is an authentication bypass in handleInboxInternal that lets an attacker impersonate any ActivityPub actor by sending forged activities signed with their own keys. The flaw processes an activity before verifying the signer’s ownership of the actor, enabling imp...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.15-2025-087 (ALASKERNEL-5.15-2025-087)

The version of kernel installed on the remote host is prior to 5.15.189-131.206. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2025-087 advisory. In the Linux kernel, the following vulnerability has been resolved: net: tap: NULL pointer derefence in...

OPENSUSE-SU-2025:15428-1 net-tools-2.10-4.1 on GA media

These are all security issues fixed in the net-tools-2.10-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15429-1 python311-uv-0.8.8-1.1 on GA media

These are all security issues fixed in the python311-uv-0.8.8-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15427-1 ffmpeg-4-4.4.6-5.1 on GA media

These are all security issues fixed in the ffmpeg-4-4.4.6-5.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15430-1 texmaker-6.0.1-2.1 on GA media

These are all security issues fixed in the texmaker-6.0.1-2.1 package on the GA media of openSUSE Tumbleweed...

Linux Distros Unpatched Vulnerability : CVE-2024-27432

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtkethsoc: fix PPE hanging issue A patch to resolve an issue was found in...

CLSA-2025-1754649468 Fix of 5 CVEs

OpenJDK 11.0.28 release, build 6. - CVE-2025-30749: Java 2D heap corruption, code execution/DoS - CVE-2025-30754: JSSE TLS handshake flaw, weakened encryption - CVE-2025-30761: nashorn sandbox bypass, code execution - CVE-2025-50059: HTTP client header bug, data leak - CVE-2025-50106: Glyph...

OPENSUSE-SU-2025:15422-1 go1.23-1.23.12-1.1 on GA media

These are all security issues fixed in the go1.23-1.23.12-1.1 package on the GA media of openSUSE Tumbleweed...

Oracle Linux 7 : java-1.8.0-openjdk (ELSA-2025-10861)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-10861 advisory. 1:1.8.0.462.b08-1.0.1 - Update to 8u462-b08 GA Orabug: 38248370 - Update release notes for 8u462-b08. - Require tzdata 2025b due to upstream inclusion...

Linux Distros Unpatched Vulnerability : CVE-2024-52006

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to...