Ubuntu: Security Advisory (USN-7796-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-8556 vulnerabilities

Vulnerabilities for packages: nuclei, crossplane, src-fingerprint, caddy, sops-fips, argo-cd-fips, commercial-grafana, vcluster, falcoctl, crossplane-provider-aws-eks, gomplate, crossplane-provider-gcp, pulumi, pulumi-language-dotnet, rclone-fips, policy-controller, hydra, kots, xeol-fips, rclone...

CVE-2025-10954 vulnerabilities

Vulnerabilities for packages: hydra-fips, hydra, weaviate...

CVE-2025-59937 vulnerabilities

Vulnerabilities for packages: gitea, gitea-fips, sftpgo...

GHSA-FMJH-F678-CV3X vulnerabilities

Vulnerabilities for packages: hydra-fips, hydra, weaviate...

GHSA-WPWJ-69CM-Q9C5 vulnerabilities

Vulnerabilities for packages: gitea, gitea-fips, sftpgo...

Linux Distros Unpatched Vulnerability : CVE-2025-9232

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'noproxy' environment variable is set and the...

AZL-78588 CVE-2025-9232 affecting package openssl-fips-provider 3.1.2-1

Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'noproxy' environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can trigger a crash...

AZL-68082 CVE-2025-9230 affecting package edk2 for versions less than 20240524git3e722403cd16-10

Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds write can cause a...

AZL-78576 CVE-2025-9230 affecting package openssl-fips-provider 3.1.2-1

Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds write can cause a...

CVE-2025-9231

Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm implementation on 64 bit ARM platforms. Impact summary: A timing side-channel in SM2 signature computations on 64 bit ARM platforms could allow recovering the private...

CVE-2025-9232 Out-of-bounds read in HTTP client no_proxy handling

Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'noproxy' environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can trigger a crash...

PT-2025-39986

Name of the Vulnerable Software and Affected Versions: OpenSSL versions prior to 3.5.4, 3.4.3, 3.3.5, 3.2.6, 3.0.18, 1.1.1zd, and 1.0.2zm. Description: OpenSSL contains vulnerabilities due to out-of-bounds read and write issues. Specifically, an out-of-bounds read and write can occur when...

Ubuntu 22.04 LTS : Linux kernel (Azure FIPS) vulnerabilities (USN-7775-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7775-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

GHSA-2HMJ-97JW-28JH vulnerabilities

Vulnerabilities for packages: apache-activemq-artemis, spark, spark-fips, apache-pulsar, solr, trino, strimzi-kafka-operator, thingsboard...

CVE-2025-58457 vulnerabilities

Vulnerabilities for packages: apache-activemq-artemis, spark, spark-fips, apache-pulsar, solr, trino, strimzi-kafka-operator, thingsboard...

Ubuntu: Security Advisory (USN-7755-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 9 : gnutls (ELSA-2025-20606)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20606 advisory. 3.8.3-6.2fips - Add FIPS package change: add fips suffix to Release and set Epoch to 10 Orabug: 35925409 - Update FIPS module name for Oracle Linux...

CVE-2025-34192

Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 22.0.893 and Application versions prior to 20.0.2140 macOS/Linux client deployments are built against OpenSSL 1.0.2h-fips released May 2016, which has been end-of-life since 2019 and is no longer supported by the OpenSSL...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: rancher-machine, mongodb-kubernetes-operator, blob-csi-fips, prometheus-bind-exporter, hivemind, newrelic-nri-statsd, yace-fips, prometheus-node-exporter-fips, cloud-provider-aws-fips, openbao-k8s-fips, azurefile-csi-fips, prometheus-beat-exporter-fips, gostatsd,...