[SECURITY] Fedora 42 Update: PackageKit-1.3.4-3.fc42

PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distro, cross-architecture API...

[SECURITY] Fedora 43 Update: PackageKit-1.3.4-3.fc43

PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distro, cross-architecture API...

[SECURITY] [DLA 4548-1] distro-info-data database update

Debian LTS Advisory DLA-4548-1 [email protected] https://www.debian.org/lts/security/ Stefano Rivera April 25, 2026 https://wiki.debian.org/LTS Package : distro-info-data Version : 0.51+deb11u11 This is a routine update of the distro-info-data database for Debian LTS users. It updates t...

Debian dla-4548 : distro-info-data - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4548 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4548-1 [email protected] https://www.debian.org/lts/security/...

[SECURITY] Fedora 44 Update: PackageKit-1.3.4-3.fc44

PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distro, cross-architecture API...

Linux Distros Unpatched Vulnerability : CVE-2026-3939

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in PDF in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted PDF fil...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: mattermost, aws-fsx-csi-driver, kubernetes-csi-external-snapshotter, beats-fips, kubernetes-dashboard-api, terraform-provider-random-fips, contour-fips, aws-flb-cloudwatch-fips, external-secrets-operator, backup-restore-operator-fips, crossplane-provider-aws-ecs-fips...

CVE-2025-11224

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated user to execute stored cross-site scripting through improper input validation in the Kubernetes proxy functionality...

CVE-2021-31828

An SSRF issue in Open Distro for Elasticsearch ODFE before 1.13.1.0 allows an existing privileged user to enumerate listening services or interact with configured resources via HTTP requests exceeding the Alerting plugin's intended scope...

CVE-2025-47913 vulnerabilities

Vulnerabilities for packages: rke2-runtime-fips, vault, gitlab-rails-ce-fips, etcd, consul-k8s, etcd-fips, gitlab-rails-ce, terraform, falco-no-driver, k3s, backup-restore-operator, cert-manager-fips...

GHSA-56W8-48FP-6MGV vulnerabilities

Vulnerabilities for packages: rke2-runtime-fips, vault, gitlab-rails-ce-fips, etcd, consul-k8s, etcd-fips, gitlab-rails-ce, terraform, falco-no-driver, k3s, backup-restore-operator, cert-manager-fips...

CVE-2025-9825

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.7 to 18.2.8, 18.3 before 18.3.4, and 18.4 before 18.4.2 that could have allowed authenticated users without project membership to view sensitive manual CI/CD variables by querying the GraphQL API...

CVE-2025-11865

An issue has been discovered in GitLab EE affecting all versions from 18.1 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that, under certain circumstances, could have allowed an attacker to remove Duo flows of another user...

CVE-2025-2615

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.7 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2, that could have allowed a blocked user to access sensitive information by establishing GraphQL subscriptions through WebSocket connections...

CVE-2025-6171

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.2 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker with reporter access to view branch names and pipeline details by accessing the packages API endpoint even wh...

CVE-2025-11990

GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated user to gain CSRF tokens by exploiting improper input validation in repository references combined with redirect handling weaknesses...

CVE-2025-31133 vulnerabilities

Vulnerabilities for packages: virt-handler-fips, prometheus-podman-exporter, rancher-agent, cluster-autoscaler-fips, buildah, node-feature-discovery, kubernetes-fips, rancher, rke2-runtime, falco-no-driver, kubernetes, k3s, podman, virt-launcher, grafana-alloy-fips, nvidia-container-toolkit,...

GHSA-CGRX-MC8F-2PRM vulnerabilities

Vulnerabilities for packages: cluster-autoscaler-fips, buildah, skaffold-fips, spegel, node-feature-discovery, k9s, envoy-gateway-fips, k3s, syft, newrelic-infrastructure-agent, amazon-k8s-cni-fips, grafana-alloy-fips, kubescape, spegel-fips, nvidia-container-toolkit, envoy-gateway, cloudbeat-fip...

GHSA-9493-H29P-RFM2 vulnerabilities

Vulnerabilities for packages: virt-handler-fips, prometheus-podman-exporter, rancher-agent, cluster-autoscaler-fips, buildah, node-feature-discovery, kubernetes-fips, rancher, rke2-runtime, falco-no-driver, kubernetes, k3s, podman, virt-launcher, grafana-alloy-fips, nvidia-container-toolkit,...

GHSA-QW9X-CQR3-WC7R vulnerabilities

Vulnerabilities for packages: prometheus-podman-exporter, rancher-agent, cluster-autoscaler-fips, buildah, node-feature-discovery, kubernetes-fips, rancher, rke2-runtime, falco-no-driver, kubernetes, k3s, podman, grafana-alloy-fips, nvidia-container-toolkit, grafana-alloy,...