263 matches found
CLSA-2026-1769507907 Fix CVE(s): CVE-2024-50349
SECURITY UPDATE: Confusing users into sending their passwords to sites under the attacker’s control using crafted URLs - debian/patches/CVE-2024-50349.patch: also encode : in credentialformat, sanitize the user prompt - CVE-2024-50349...
openSUSE Security Advisory (SUSE-SU-2026:0243-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
glib2 security update
2.56.4-168 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - Enable testsuite during RPM check phase...
MiracleLinux 7 : 389-ds-base-1.3.10.2-15.el7 (AXSA:2022-3083:01)
The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3083:01 advisory. 389-ds-base: double-free of the virtual attribute context in persistent search CVE-2021-4091 Tenable has extracted the preceding description block directly...
CLSA-2026-1768861951 Update of gnutls
Backport CVE fixes - Bump version to solve conflict with community package...
PT-2026-2078
Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.2 Description iccDEV is a set of libraries and tools for interacting with International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 exhibit an Undefined Behavior runtime error when...
CLSA-2025-1767098038 Update of java-11-openjdk
Upgrade to openjdk-11.0.29+7 GA...
DSA-6088-1 php8.4 - security update
Bulletin has no description...
CLSA-2025-1766137116 Fix CVE(s): CVE-2025-6020
Reworked CVE-2025-6020 patches to preserve ABI compatibility - Add pammodutilsanitizehelperfds as a static inline helper in the header for modules - Keep the exported pammodutilsanitizehelperfds in libpam as a wrapper that calls the new helper...
RHSA-2025:23414 Red Hat Security Advisory: bind security update
Bulletin has no description...
RHSA-2025:23210 Red Hat Security Advisory: keylime security update
Bulletin has no description...
RHSA-2025:23033 Red Hat Security Advisory: abrt security update
Bulletin has no description...
CLSA-2025-1765376235 python3.11-pip: Fix of CVE-2007-4559
CVE-2007-4559: fix for tarfile directory traversal vulnarability...
CLSA-2025-1765289777 Fix CVE(s): CVE-2025-11839, CVE-2025-11840
SECURITY UPDATE: remove abort call in debug format printing code - debian/patches/CVE-2025-11839.patch: remove call to abort in the debug format printing code, allowing display of fuzzed input files to complete without triggering an abort - CVE-2025-11839 SECURITY UPDATE: fix SEGV in vfinfo -...
USN-7896-1 libxml2 vulnerabilities
It was discovered that the libxml2 Python bindings incorrectly handled certain return values. An attacker could possibly use this issue to cause libxml2 to crash, resulting in a denial of service. CVE-2025-32414 It was discovered that libxml2 incorrectly handled certain memory operations. A remot...
RHSA-2025:21974 Red Hat Security Advisory: mingw-expat security update
Bulletin has no description...
RHSA-2025:21819 Red Hat Security Advisory: idm:DL1 security update
Bulletin has no description...
EUVD-2025-178099
Malicious code in library-update-commitizen-jabbah npm...
Malicious code in library-update-commitizen-jabbah (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97f9907c91e0e0fd8eb3295044a11a6a9a0d6513f2fc950b21059db2c7ec5b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
