Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : Composer vulnerabilities (USN-7603-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7603-1 advisory. Thomas Chauchefoin discovered that Composer did not correctly handle certain arguments. An attacker could...

Oracle Linux 10 : osbuild-composer (ELSA-2025-9623)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-9623 advisory. - Ensure build on latest golang: CVE-2024-34156 - Rebuild for CVE-2025-22871 Tenable has extracted the preceding description block directly from the Oracle Lin...

Oracle Linux 10 : osbuild-composer (ELSA-2025-7503)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7503 advisory. - Ensure build on latest golang: CVE-2024-34156 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note th...

USN-7603-1 composer vulnerabilities

Thomas Chauchefoin discovered that Composer did not correctly handle certain arguments. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. CVE-2022-24828, CVE-2023-43655 Ed Cradoc...

USN-7603-1: Composer vulnerabilities

Thomas Chauchefoin discovered that Composer did not correctly handle certain arguments. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. CVE-2022-24828, CVE-2023-43655 Ed Cradoc...

AlmaLinux 9 : osbuild-composer (ALSA-2025:9634)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:9634 advisory. net/http: Request smuggling due to acceptance of invalid chunked data in net/http CVE-2025-22871 Tenable has extracted the preceding description block directly fro...

Ubuntu: Security Advisory (USN-7603-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AlmaLinux 8 : osbuild-composer (ALSA-2025:9844)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:9844 advisory. net/http: Request smuggling due to acceptance of invalid chunked data in net/http CVE-2025-22871 Tenable has extracted the preceding description block directly fro...

RHSA-2025:9844 Red Hat Security Advisory: osbuild-composer security update

Bulletin has no description...

Oracle Linux 8 : osbuild-composer (ELSA-2025-9844)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-9844 advisory. - Rebuilt to fix: - CVE-2024-34156 - CVE-2024-1394 - RHEL-24303 - RHEL-57905 Tenable has extracted the preceding description block directly from the Oracle Linu...

Moderate: Red Hat Security Advisory: osbuild-composer security update

An update for osbuild-composer is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...

RHSA-2025:9715 Red Hat Security Advisory: osbuild-composer security update

Bulletin has no description...

RHSA-2025:9713 Red Hat Security Advisory: osbuild-composer security update

Bulletin has no description...

RHSA-2025:9711 Red Hat Security Advisory: osbuild-composer security update

Bulletin has no description...

RHSA-2025:9642 Red Hat Security Advisory: osbuild-composer security update

Bulletin has no description...

RHSA-2025:9641 Red Hat Security Advisory: osbuild-composer security update

Bulletin has no description...

RHSA-2025:9640 Red Hat Security Advisory: osbuild-composer security update

Bulletin has no description...

RHSA-2025:9623 Red Hat Security Advisory: osbuild-composer security update

Bulletin has no description...

RHSA-2025:9634 Red Hat Security Advisory: osbuild-composer security update

Bulletin has no description...

Moderate: Red Hat Security Advisory: weldr-client security update

An update for weldr-client is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring...