RLSA-2024:9404 Moderate: libgcrypt security update

The libgcrypt library provides general-purpose implementations of various cryptographic algorithms. Security Fixes: libgcrypt: vulnerable to Marvin Attack CVE-2024-2236 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information,...

nfs-utils bug fix and enhancement update

An update is available for nfs-utils. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9....

tuned security update

An update is available for tuned. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The tuned packages provide a service that tunes system settings according to a...

[SECURITY] [DSA 5881-1] rails security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5881-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 17, 2025 https://www.debian.org/security/faq -...

Updated php packages fix security vulnerabilities

Bugs and security with streams have been fixed...

MGASA-2025-0100 Updated php packages fix security vulnerabilities

Bugs and security with streams have been fixed...

CVE-2024-9055 DPA Countermeasures need reseeding

The DPA countermeasures on Silicon Labs' Series 2 devices are not reseeded periodically as they should be. This may allow an attacker to eventually extract secret keys through a DPA attack...

CVE-2025-2395

creationtimestamp| type| source ---|---|--- 2025-03-17 06:40:15+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lkkkbsyv2v2v 2025-03-17 07:48:28+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114176668990422188 2025-03-17 08:00:53+00:00| seen|...

openSUSE Security Advisory (SUSE-SU-2025:0862-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

firefox security update

128.8.0-1.0.1 - Update to 128.8.0 build1 Orabug: 37700882CVE-2025-1930CVE-2025-1931 CVE-2025-1932CVE-2025-1933CVE-2025-1934CVE-2025-1935CVE-2025-1936 CVE-2025-1937CVE-2025-1938...

tomcat10-10.1.35-1.1 on GA media (moderate)

tomcat10-10.1.35-1.1 on GA media Announcement ID: openSUSE-SU-2025:14897-1 Rating: moderate Cross-References: CVE-2004-56337 CVE-2024-56337 CVE-2025-24813 CVSS scores: CVE-2024-56337 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2025-24813 SUSE : 8.1...

Fedora 41 : libxml2 (2025-65790c11eb)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-65790c11eb advisory. Update to 2.12.10 Fix CVE-2024-56171 and CVE-2025-24928. Tenable has extracted the preceding description block directly from the Fedora security...

CVE-2025-26961

creationtimestamp| type| source ---|---|--- 2025-03-15 23:48:54+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114169120973515017 2025-03-16 02:09:41+00:00| seen| https://t.me/cvedetector/20384...

Updated ghostscript packages fix security vulnerabilities

This release addresses CVEs: CVE-2025-27835, CVE-2025-27832, CVE-2025-27831, CVE-2025-27836, CVE-2025-27830, CVE-2025-27833, CVE-2025-27837, CVE-2025-27834 The 10.05.0 release deprecates the non-standard operator "selectdevice", all code should now be using the standard "setpagedevice" operator...

MGASA-2025-0098 Updated ghostscript packages fix security vulnerabilities

This release addresses CVEs: CVE-2025-27835, CVE-2025-27832, CVE-2025-27831, CVE-2025-27836, CVE-2025-27830, CVE-2025-27833, CVE-2025-27837, CVE-2025-27834 The 10.05.0 release deprecates the non-standard operator "selectdevice", all code should now be using the standard "setpagedevice" operator...

RHEL 7 : kernel-rt (RHSA-2025:2510)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:2510 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

RHEL 9 : kernel-rt (RHSA-2025:2512)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:2512 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

RHEL 8 : kernel-rt (RHSA-2025:2524)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:2524 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

Post-Quantum Secure Feldman's Verifiable Secret Sharing has Timing Side-Channels in Matrix Operations

Description: The feldmanvss library contains timing side-channel vulnerabilities in its matrix operations, specifically within the findsecurepivot function and potentially other parts of securematrixsolve. These vulnerabilities are due to Python's execution model, which does not guarantee...

GHSA-MRXW-MXHJ-P664 Nokogiri updates packaged libxslt to v1.1.43 to resolve multiple CVEs

Summary Nokogiri v1.18.4 upgrades its dependency libxslt to v1.1.43. libxslt v1.1.43 resolves: - CVE-2025-24855: Fix use-after-free of XPath context node - CVE-2024-55549: Fix UAF related to excluded namespaces Impact CVE-2025-24855 - "Use-after-free due to xsltEvalXPathStringNs leaking...