Ubuntu: Security Advisory (USN-7280-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 9 : php:8.2 (ELSA-2025-7432)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-7432 advisory. php 8.2.28-1 - rebase to 8.2.28 8.2.25-1 - rebase to 8.2.25 RHEL-65837 8.2.13-1 - rebase to 8.2.13 RHEL-14699 - add %phpize and %phpconfig macros - mov...

CVE-2020-35606

Arbitrary command execution can occur in Webmin through 1.962. Any user authorized for the Package Updates module can execute arbitrary commands with root privileges via vectors involving %0A and %0C. NOTE: this issue exists because of an incomplete fix for CVE-2019-12840...

Oracle Linux 9 : pcs (ELSA-2025-7085)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7085 advisory. 0.11.9-2 - Fixed restarting bundles Resolves: RHEL-79055 - Fixed deletion of misconfigured bundles Resolves: RHEL-79160 - Fixed filtering of resource clones in...

Oracle Linux 9 : git-lfs (ELSA-2025-7256)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-7256 advisory. 3.6.1-1 - Update to 3.6.1 - Resolves: RHEL-73940 3.6.0-1 - Update to 3.6.0 - Resolves: RHEL-63968, RHEL-61045, RHEL-47219, RHEL-43318, RHEL-35936,...

Oracle Linux 9 : buildah (ELSA-2025-7389)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7389 advisory. 1.39.4-1.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117178 2:1.39.4-1 - update to...

Important Photon OS Security Update - PHSA-2025-5.0-0525

Updates of 'bindutils' packages of Photon OS have been released...

dante-1.4.4-1.1 on GA media (moderate)

dante-1.4.4-1.1 on GA media Announcement ID: openSUSE-SU-2025:15132-1 Rating: moderate Cross-References: CVE-2024-54662 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the dante-1.4.4-1.1...

Alibaba Cloud Linux 3 : 0146: cockpit (ALINUX3-SA-2023:0146)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2023:0146 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2021-3660: Cockpit and its plugins do...

Alibaba Cloud Linux 3 : 0063: java-1.8.0-openjdk (ALINUX3-SA-2025:0063)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2025:0063 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-21587: Vulnerability in the Oracl...

Alibaba Cloud Linux 3 : 0062: nodejs:20 (ALINUX3-SA-2025:0062)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2025:0062 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-31498: c-ares is an asynchronous resolver...

Alibaba Cloud Linux 3 : 0061: libsoup (ALINUX3-SA-2025:0061)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2025:0061 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-32050: A flaw was found in libsou...

Alibaba Cloud Linux 3 : 0067: osbuild and osbuild-composer (ALINUX3-SA-2025:0067)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2025:0067 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-1394: A memory leak flaw was foun...

Alibaba Cloud Linux 3 : 0064: java-17-openjdk (ALINUX3-SA-2025:0064)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2025:0064 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-21587: Vulnerability in the Oracl...

Alibaba Cloud Linux 3 : 0068: emacs (ALINUX3-SA-2025:0068)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2025:0068 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-53920: In elisp-mode.el in GNU Emacs befor...

Photon OS 5.0: Libsoup PHSA-2025-5.0-0522

An update of the libsoup package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0522. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Alibaba Cloud Linux 3 : 0036: edk2 (ALINUX3-SA-2024:0036)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0036 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2019-14560: This CVE ID has been rejected or...

Alibaba Cloud Linux 3 : 0131: vorbis-tools (ALINUX3-SA-2024:0131)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0131 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2023-43361: Buffer Overflow vulnerability in...

Alibaba Cloud Linux 3 : 0033: container-tools:3.0 (ALINUX3-SA-2022:0033)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0033 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2022-27649: A flaw was found in Podman...

Alibaba Cloud Linux 3 : 0079: cloud-kernel bugfix, enhancement and (ALINUX3-SA-2023:0079)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2023:0079 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2021-33061: Insufficient control flow...