ALSA-2025:12752 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: HID: intel-ish-hid: Fix use-after-free issue in ishtphidremove CVE-2025-21928 kernel: memstick: rtsxusbms: Fix slab-use-after-free in rtsxusbmsdrvremove CVE-2025-22020 kernel: netsched:...

RHSA-2025:12293 Red Hat Security Advisory: virt:rhel and virt-devel:rhel security update

Bulletin has no description...

CVE-2025-54388 vulnerabilities

Vulnerabilities for packages: falcoctl, zarf, openfga, docker-cli-buildx, wolfictl, trivy, nerdctl, grype, k9s, zot, osv-scanner, cadvisor, splunk-otel-collector, buildah, trufflehog, buf, goreleaser, tw, melange, aws-otel-collector, apko, dagger, buildkitd, opentelemetry-collector, docker-compos...

CVE-2025-48924 vulnerabilities

Vulnerabilities for packages: opensearch, debezium-connector-spanner, spark-fips, apache-tika, celeborn, commercial-elasticsearch, liquibase, cassandra-reaper, infinispan, elasticsearch-fips, spdx-tools-java, hadoop-fips, camunda-zeebe, sonar-scanner-cli, jenkins-plugin-manager, apache-nifi,...

RHSA-2025:10295 Red Hat Security Advisory: OpenShift Container Platform 4.17.35 packages and security update

Bulletin has no description...

Fedora 42 : perl / perl-Devel-Cover / perl-PAR-Packer (2025-26c0346398)

The remote Fedora 42 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-26c0346398 advisory. Fix CVE-2024-56406 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

RHSA-2025:9766 Red Hat Security Advisory: OpenShift Container Platform 4.16.43 packages and security update

Bulletin has no description...

GHSA-FV92-FJC5-JJ9H vulnerabilities

Vulnerabilities for packages: traefik, wolfictl, amazon-cloudwatch-agent-operator, github-mcp-server, nri-discovery-kubernetes, steampipe, nerdctl, k9s, terraform-mcp-server, jitsucom-bulker, flux-source-controller, hcloud, opa, aws-otel-collector, docker-compose, syft, spire-server,...

RHSA-2025:9279 Red Hat Security Advisory: OpenShift Container Platform 4.19.1 packages and security update

Bulletin has no description...

CVE-2025-22874 vulnerabilities

Vulnerabilities for packages: multus-cni, kubernetes-dashboard-api, go-bindata, trust-manager, promxy, terraform-mcp-server, terraform-docs, elvish, rancher-telemetry, croc, wazero, scorecard, fuse-overlayfs-snapshotter, aws-flb-kinesis, pdfcpu, nri-f5, cert-manager-webhook-pdns,...

CVE-2025-4673 vulnerabilities

Vulnerabilities for packages: azuredisk-csi-fips, consul, cloud-sql-proxy, k8ssandra-operator, kubernetes-replicator, timestamp-authority-fips, sftpgo-plugin-eventstore, consul-k8s, nginx-prometheus-exporter, vault-secrets-webhook, nfs-subdir-external-provisioner, velero-plugin-for-csi-fips,...

GHSA-6F52-WPX2-HVF2 vulnerabilities

Vulnerabilities for packages: azuredisk-csi-fips, consul, cloud-sql-proxy, k8ssandra-operator, kubernetes-replicator, timestamp-authority-fips, sftpgo-plugin-eventstore, consul-k8s, nginx-prometheus-exporter, vault-secrets-webhook, nfs-subdir-external-provisioner, velero-plugin-for-csi-fips,...

GHSA-WXR5-93PH-8WR9 vulnerabilities

Vulnerabilities for packages: opensearch, celeborn, cassandra-reaper, spdx-tools-java, camunda-zeebe, neo4j, jenkins-plugin-manager, apache-nifi, confluent-kafka-jre-bcfips, druid, hadoop-client-modules, kafka, tez, trino, wildfly, akhq, apicurio-registry, confluent-common-docker,...

CVE-2022-4894

Certain HP and Samsung Printer software packages may potentially be vulnerable to elevation of privilege due to Uncontrolled Search Path Element...

Ubuntu: Security Advisory (USN-7516-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2025-5127 Malicious code in requestpackat (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b70e437edd04a30f48e384a4a07cdb1790dcb5e6a66ba800dc1703bf845a6b36 Code download and runs an executable, which is widely recognized as malware. The system is also configured to run it on startup, and the file is saved in paths...

MGASA-2025-0155 Updated postgresql15 & postgresql13 packages fix security vulnerability

PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation. CVE-2025-4207...

BELL-CVE-2025-30722

Bulletin has no description...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: consul, kubernetes-replicator, consul-k8s, nginx-prometheus-exporter, nfs-subdir-external-provisioner, velero-plugin-for-csi-fips, gostatsd, gomplate, cni-plugins, istio-pilot-discovery, kyverno, step-issuer-fips, tekton-chains, kubernetes-event-exporter,...

MGASA-2025-0111 Updated kernel, kmod-virtualbox & kmod-xtables-addons packages fix security vulnerabilities

Upstream kernel version 6.6.83 fixes bugs and vulnerabilities. The kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new kernel. For information about the vulnerabilities see the links...