28450 matches found
Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM Cloud Pak for Applications, is affected by a security bypass vulnerability (CVE-2024-56339)
Summary IBM WebSphere Application Server, which is bundled with IBM Cloud Pak for Applications, is affected by a security bypass caused by a failure to honor security configuration. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and...
Security update for the Linux Kernel
This update provides the initial livepatch for this kernel update. This update does not contain any fixes and will be updated with livepatches later. Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this SUSE update use the SUSE...
USN-7673-1: CRaC JDK 21 vulnerabilities
It was discovered that the 2D component of CRaC JDK 21 did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2025-30749, CVE-2025-50106 VMashroor Hasan Bhuiyan discovered that the JSSE...
nodejs:22 security update
nodejs 1:22.16.0-2 - Patch fix for sqlite CVE-2025-6965 Resolves: RHEL-103835 1:22.15-1-1 - Update to 22.16.0 Fixes: CVE-2025-23166 - Resolves: RHEL-91596 RHEL-92859 1:22.15.0-1 - Update to 22.15.0 - Drop upstream patches 1:22.13.1-4 - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87300...
RHEL 7 / 8 / 9 : Red Hat JBoss Web Server 5.8.5 (RHSA-2025:11695)
The remote Redhat Enterprise Linux 7 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:11695 advisory. Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised o...
RHEL 9 : kernel (RHSA-2025:11861)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:11861 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: media: uvcvideo: Fix double...
ALSA-2025:11861 Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: media: uvcvideo: Fix double free in error path CVE-2024-57980 kernel: wifi: iwlwifi: limit printed string from FW file CVE-2025-21905 kernel: RDMA/mlx5: Fix pagesize variable overflow...
RHEL 9 : kernel (RHSA-2025:11810)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:11810 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: drm/amd/display: Implement...
OPENSUSE-SU-2025:15390-1 java-11-openj9-11.0.28.0-1.1 on GA media
These are all security issues fixed in the java-11-openj9-11.0.28.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15389-1 forgejo-longterm-11.0.3-1.1 on GA media
These are all security issues fixed in the forgejo-longterm-11.0.3-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15391-1 java-17-openj9-17.0.16.0-1.1 on GA media
These are all security issues fixed in the java-17-openj9-17.0.16.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15393-1 java-21-openj9-21.0.8.0-1.1 on GA media
These are all security issues fixed in the java-21-openj9-21.0.8.0-1.1 package on the GA media of openSUSE Tumbleweed...
Security update for opera (important)
openSUSE Security Update: Security update for opera Announcement ID: openSUSE-SU-2025:0265-1 Rating: important References: Cross-References: CVE-2025-4664 CVE-2025-5419 Affected Products: openSUSE Leap 15.6:NonFree An update that fixes two vulnerabilities is now available. Description: This updat...
Security update for varnish (important)
openSUSE Security Update: Security update for varnish Announcement ID: openSUSE-SU-2025:0179-1 Rating: important References: 1216123 1221942 1239892 Cross-References: CVE-2013-4484 CVE-2023-44487 CVE-2024-30156 CVE-2025-30346 CVSS scores: CVE-2023-44487 SUSE: 7.5...
CVE-2025-54378 HAX CMS Backend Lacks Comprehensive Authorization Checks
HAX CMS allows you to manage your microsite universe with PHP or NodeJs backends. In versions 11.0.13 and below of haxcms-nodejs and versions 11.0.8 and below of haxcms-php, API endpoints do not perform authorization checks when interacting with a resource. Both the JS and PHP versions of the CMS...
CVE-2025-54378
CVE-2025-54378 affects HAX CMS backends (nodejs and PHP). The issue is that API endpoints do not verify authorization for resource interactions, only checking authentication, allowing an authenticated user to perform privileged operations. Affected versions: haxcms-nodejs ≤ 11.0.13 and haxcms-php...
OPENSUSE-SU-2025:15388-1 rpi-imager-1.9.5-1.1 on GA media
These are all security issues fixed in the rpi-imager-1.9.5-1.1 package on the GA media of openSUSE Tumbleweed...
Security update for chromium (important)
openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2025:0187-1 Rating: important References: Affected Products: openSUSE Backports SLE-15-SP6 An update that contains security fixes can now be installed. Description: Chromium was updated to 137.0.7151.68 stable...