RHEL 7 / 8 / 9 : java-11-openjdk ELS (RHSA-2025:10865)

The remote Redhat Enterprise Linux 7 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:10865 advisory. The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. This...

OPENSUSE-SU-2025:15364-1 libexslt0-1.1.43-2.1 on GA media

These are all security issues fixed in the libexslt0-1.1.43-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15362-1 java-21-openjdk-21.0.8.0-1.1 on GA media

These are all security issues fixed in the java-21-openjdk-21.0.8.0-1.1 package on the GA media of openSUSE Tumbleweed...

Fedora 42 : pypy (2025-a37bf9ddbd)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-a37bf9ddbd advisory. - Update to 7.3.20 - Security fixes for CVE-2025-47273, CVE-2024-47081 and CVE-2025-50181 in pip and setuptools wheels Tenable has extracted the...

OPENSUSE-SU-2025:15368-1 lemon-3.50.3-1.1 on GA media

These are all security issues fixed in the lemon-3.50.3-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE-SU-2025:20498-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup bsc1237913. - CVE-2024-58053: rxrpc: Fix handling of received connection abort...

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup bsc1237913. CVE-2024-58053: rxrpc: Fix handling of received connection abort bsc1238982...

CVE-2025-6023

An open redirect vulnerability has been identified in Grafana OSS that can be exploited to achieve XSS attacks. The vulnerability was introduced in Grafana v11.5.0. The open redirect can be chained with path traversal vulnerabilities to achieve XSS. Fixed in versions 12.0.2+security-01,...

SUSE SLES15 Security Update : coreutils (SUSE-SU-2025:02354-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02354-1 advisory. Security fixes: - CVE-2025-5278: Fixed heap buffer under-read may lead to a crash or leak sensitive data bsc1243767 Other fixes: - ls: avoi...

OPENSUSE-SU-2025:15357-1 java-17-openjdk-17.0.16.0-1.1 on GA media

These are all security issues fixed in the java-17-openjdk-17.0.16.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15354-1 bind-9.20.11-1.1 on GA media

These are all security issues fixed in the bind-9.20.11-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15355-1 cosign-2.5.3-1.1 on GA media

These are all security issues fixed in the cosign-2.5.3-1.1 package on the GA media of openSUSE Tumbleweed...

RHEL 8 / 9 : java-1.8.0-openjdk (RHSA-2025:10862)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:10862 advisory. The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Securit...

OPENSUSE-SU-2025:15356-1 java-11-openjdk-11.0.28.0-1.1 on GA media

These are all security issues fixed in the java-11-openjdk-11.0.28.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15359-1 valkey-8.1.3-1.1 on GA media

These are all security issues fixed in the valkey-8.1.3-1.1 package on the GA media of openSUSE Tumbleweed...

Important: Red Hat Security Advisory: OpenJDK 21.0.8 Security Update for Portable Linux Builds

An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...

OPENSUSE-SU-2025:15348-1 FastCGI-2.4.6-1.1 on GA media

These are all security issues fixed in the FastCGI-2.4.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15352-1 kubelogin-0.2.10-1.1 on GA media

These are all security issues fixed in the kubelogin-0.2.10-1.1 package on the GA media of openSUSE Tumbleweed...

Important: java-1.8.0-openjdk security update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fixes: JDK: Better Glyph drawing CVE-2025-30749 JDK: Enhance TLS protocol support CVE-2025-30754 JDK: Improve scripting supports CVE-2025-30761 JDK: Better Glyp...

SUSE SLES15: xen / xen-devel / xen-libs / xen-tools / xen-tools-domU / etc (SUSE-SU-2025:02326-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02326-1 advisory. Security fixes: - CVE-2024-28956: Fixed Intel CPU: Indirect Target Selection ITS XSA-469 bsc1243117 - CVE-2024-53241: Fixed Xen...