python313-bugzilla-3.3.0-1.4 on GA media (moderate)

python313-bugzilla-3.3.0-1.4 on GA media Announcement ID: openSUSE-SU-2026:12002-1 Rating: moderate Cross-References: CVE-2013-2191 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

PT-2026-105711

These are all security issues fixed in the python313-bugzilla-3.3.0-1.4 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12002-1 python313-bugzilla-3.3.0-1.4 on GA media

These are all security issues fixed in the python313-bugzilla-3.3.0-1.4 package on the GA media of openSUSE Tumbleweed...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: cpufreq/longhaul: handled NULL policy in longhaulexit The longhaulexit function was calling cpufreqcpuget0 without checking for a NULL policy pointer. On some systems, this could lead to a NULL derefrence and a kernel warning or...

Mozilla: A disabled account's API key still works on BMO's Mojolicious /rest/ routes, including for security-group bugs filed after the disable

A Bugzilla instance had inconsistent authentication validation across its API implementations. The newer REST routes failed to verify account status when processing API keys, while the legacy REST API and web interface correctly rejected disabled accounts. This allowed disabled accounts' API keys...

Bugzilla - Detect

Detects a Bugzilla server, official repository for the Bugzilla bug tracking system. !/usr/bin/env python3 -- coding: utf-8 -- """Detects a Bugzilla server, official repository for the Bugzilla bug tracking system.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

Bugzilla - Config Exposed Detection

Because the config.cgi is publicly exposed, it is possible to enumerate main domain and possible users registered on Bugzilla server. !/usr/bin/env python3 -- coding: utf-8 -- """Because the config.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanne...

Fedora 43 : moby-engine (2026-64ca3441c3)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-64ca3441c3 advisory. - Update to release v29.6.2 - Resolves: rhbz2496437 - Upstream security fixes - - GHSA-hw3h-2gp9-cxpv - - GHSA-qx3x-mv6r-52p6 - - GHSA-32pv-7hq5-qhwq - -...

Infinite loop

Overview Affected versions of this package are vulnerable to Infinite loop via the SSHMSGCHANNELOPEN process. An attacker can cause the system to enter an infinite loop and exhaust CPU resources by advertising a zero maximum packet size during channel establishment. Remediation A fix was pushed...

SUSE-SU-2026:2854-2 Security update for python-urllib3

This update for python-urllib3 fixes the following issue - Regression introduced by CVE-2025-66471 fix during file download with pySSL bsc1270365...

[SECURITY] Fedora 43 Update: sandogasa-0.15.3-2.fc43

A collection of tools and libraries for Fedora package maintenance and contributor activity tracking, built around shared API clients for Bugzilla, Bodhi, NVD, dist-git, Discourse, FASJSON, and HyperKitty. The name sandogasa =E8=8F=85=E7=AC=A0 refers to a Japanese straw hat of ten associated with...

[SECURITY] Fedora 44 Update: sandogasa-0.15.3-2.fc44

A collection of tools and libraries for Fedora package maintenance and contributor activity tracking, built around shared API clients for Bugzilla, Bodhi, NVD, dist-git, Discourse, FASJSON, and HyperKitty. The name sandogasa =E8=8F=85=E7=AC=A0 refers to a Japanese straw hat of ten associated with...

Fedora 43 : hugo (2026-6f3d11bdc6)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6f3d11bdc6 advisory. Update to 0.162.1 rhbz2455512 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not test...

Fedora 43 : nano (2026-d0a0f1c3d2)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d0a0f1c3d2 advisory. fix CVE-2026-6842 and CVE-29026-6843 Resolves: CVE-2026-6842 Resolves: CVE-2026-6843 Resolves: rhbz2455127 Resolves: rhbz2455314 Tenable has extract...

FreeBSD : Mozilla -- Other issue in the Networking: DNS component (4ca48006-430a-11f1-a627-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 4ca48006-430a-11f1-a627-b42e991fc52e advisory. https://bugzilla.mozilla.org/showbug.cgi?id=2022726 reports: Other issue in the Networking: DNS...

FreeBSD : firefox -- Information disclosure (53ff336e-4394-11f1-a190-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 53ff336e-4394-11f1-a190-b42e991fc52e advisory. https://bugzilla.mozilla.org/showbug.cgi?id=2027433 reports: Information disclosure due to incorrect...

FreeBSD : Mozilla -- Invalid pointer (671af4b2-4305-11f1-a627-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 671af4b2-4305-11f1-a627-b42e991fc52e advisory. https://bugzilla.mozilla.org/showbug.cgi?id=2013588 reports: Invalid pointer in the JavaScript:...

Off-by-one Error

Overview Affected versions of this package are vulnerable to Off-by-one Error through improper bounds checking in the PKCS12 bag handling process. An attacker can cause memory corruption by appending to a PKCS12 bag that already contains 32 elements, potentially resulting in denial of service or...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the Arena memory allocation. An attacker can cause unintended modification of data by providing specially crafted input that manipulates memory allocation boundaries. Remediation A fix was pushed into the...

Use of a Broken or Risky Cryptographic Algorithm

Overview org.graalvm.sdk:graal-sdk is a high-performance JDK distribution designed to accelerate the execution of applications written in Java and other JVM languages along with support for JavaScript, Ruby, Python, and a number of other popular languages. Affected versions of this package are...