CVE-2025-2183

An insufficient certificate validation issue in the Palo Alto Networks GlobalProtect™ app enables attackers to connect the GlobalProtect app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same subnet to install malicious root...

CVE-2025-2183 GlobalProtect App: Improper Certificate Validation Leads to Privilege Escalation

An insufficient certificate validation issue in the Palo Alto Networks GlobalProtect™ app enables attackers to connect the GlobalProtect app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same subnet to install malicious root...

CVE-2025-2183

The provided documents identify CVE-2025-2183 as an improper certificate validation in Palo Alto Networks GlobalProtect App for Windows. Affected are GlobalProtect App on Windows 6.x before 6.2.8-h3 and 6.3.x before 6.3.3-h2. The underlying issue is insufficient certificate validation which can a...

kernel security update

5.14.0-570.33.2.0.16.OL9 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys lis...

PT-2025-33023 · Palo Alto Networks · Globalprotect

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks GlobalProtect app affected versions not specified Description: An insufficient certificate validation issue in the Palo Alto Networks GlobalProtect app allows attackers to connect the app to arbitrary servers. This can enab...

August 12, 2025—KB5063888 (Monthly Rollup)

None None...

August 12, 2025—KB5063877 (OS Build 17763.7678)

None None...

August 12, 2025—Hotpatch KB5063812 (OS Build 20348.3989)

None None...

August 12, 2025—KB5063906 (Monthly Rollup)

None None...

August 12, 2025—KB5063950 (Monthly Rollup)

None None...

August 12, 2025—KB5063948 (Security-only update)

None None...

August 12, 2025—KB5063875 (OS Builds 22621.5768 and 22631.5768)

None None...

August 12, 2025—KB5063878 (OS Build 26100.4946) for Windows

None None...

August 12, 2025—KB5063880 (OS Build 20348.4052)

None None...

August 12, 2025—KB5063899 (OS Build 25398.1791)

None None...

August 12, 2025—KB5063871 (OS Build 14393.8330)

None None...

Fedora 42 : toolbox (2025-e41c694c83)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-e41c694c83 advisory. Security fixes Bumped the minimum github.com/go-viper/mapstructure/v2 version to 2.3.0 for GHSA-fv92-fjc5-jj9h or GO-2025-3787 Bumped the minimum...

Kigen eUICC Type Confusion

Security Explorations has further examined the security of Kigen eUICC cards with GSMA consumer certificates installed. This advisory is an update and expansion to the original research disclosed, however it does not disclose exact details. They do, however, state that the new issue seems more...

Debian dla-4269 : ca-certificates-java - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4269 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4269-1 [email protected] https://www.debian.org/lts/security/...

[SECURITY] [DLA 4269-1] ca-certificates-java bugfix update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4269-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès August 11, 2025 https://wiki.debian.org/LTS -...