28450 matches found
Withdrawn Advisory: LikeC4 has RCE through vulnerable React and Next.js versions
Withdrawn Advisory This advisory has been withdrawn because LikeC4 isn’t impacted by CVE-2025-55182 because it doesn’t ship React. React is a peer dependency. Original Description LikeC4 uses React and Next.js: which contain known RCE vulnerabilities, as seen in CVE-2025-55182. 2025-12-15 Edit: t...
CVE-2025-40085 affecting package kernel for versions less than 6.6.117.1-1
CVE-2025-40085 affecting package kernel for versions less than 6.6.117.1-1. An upgraded version of the package is available that resolves this issue...
Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.18.2 security update
Important: Red Hat OpenShift GitOps v1.18.2 security update An update is now available for Red Hat OpenShift GitOps. Bug Fixes and Enhancements: GITOPS-7608 Redis HA pods are taking longer than expected to come up GITOPS-7789 Version override in ArgoCD CR causes operator to use upstream images...
SUSE-SU-2025:21212-1 Security update for grub2
This update for grub2 fixes the following issues: Changes in grub2: - CVE-2025-54771: Fixed grubfileclose does not properly controls the fs refcount bsc1252931 - CVE-2025-54770: Fixed missing unregister call for netsetvlan command may lead to use-after-free bsc1252930 - CVE-2025-61662: Fixed...
Important: Red Hat Security Advisory: Red Hat Quay 3.13.10
Red Hat Quay 3.13.10 is now available with bug fixes. Quay 3.13.10...
OPENSUSE-SU-2025:15821-1 qemu-10.1.3-1.1 on GA media
These are all security issues fixed in the qemu-10.1.3-1.1 package on the GA media of openSUSE Tumbleweed...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2025:03600-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03600-1 advisory. The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The...
Security update for hauler (important)
openSUSE security update: security update for hauler ------------------------------------------------------------- Announcement ID: openSUSE-SU-2025-20160-1 Rating: important References: bsc1235332 bsc1241184 bsc1241804 bsc1246722 bsc1248937 bsc1251516 bsc1251651 bsc1251891 Cross-References:...
CVE-2025-43388
An injection issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data...
OPENSUSE-SU-2025:15820-1 chromedriver-143.0.7499.109-1.1 on GA media
These are all security issues fixed in the chromedriver-143.0.7499.109-1.1 package on the GA media of openSUSE Tumbleweed...
Security update for rhino
This update for rhino fixes the following issues: Update to version 1.7.15.1. Security issues fixed: CVE-2025-66453: high CPU consumption when processing specific numbers via the toFixed function bsc1254481. Other changes and issues fixed: Version 1.7.15: Basic support for "rest parameters"...
Security update for kubernetes-client
This update for kubernetes client rebuilds it against current the go release to fix bugs and security issues in the go stdlib. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...
OPENSUSE-SU-2025:15818-1 pgadmin4-9.11-1.1 on GA media
These are all security issues fixed in the pgadmin4-9.11-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15817-1 buildpacks-cli-0.39.1-1.1 on GA media
These are all security issues fixed in the buildpacks-cli-0.39.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15816-1 ImageMagick-7.1.2.10-1.1 on GA media
These are all security issues fixed in the ImageMagick-7.1.2.10-1.1 package on the GA media of openSUSE Tumbleweed...
[slackware-security] mozilla-thunderbird
New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-140.6.0esr-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For...
CVE-2025-66473
XWiki is an open-source wiki software platform. Versions 16.10.10 and below, 17.0.0-rc-1 through 17.4.3 and 17.5.0-rc-1 through 17.6.0 contain a REST API which doesn't enforce any limits for the number of items that can be requested in a single request at the moment. Depending on the number of...
CVE-2025-62181
Pega Platform versions 7.1.0 through Infinity 25.1.0 are affected by a User Enumeration. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or not. This only applies to deprecated...
SUSE-SU-2025:4363-1 Security update for postgresql17, postgresql18
This update for postgresql17, postgresql18 fixes the following issues: Changes in postgresql18: - Fix build with uring for post SLE15 code streams. Update to 18.1: https://www.postgresql.org/about/news/p-3171/ https://www.postgresql.org/docs/release/18.1/ bsc1253332, CVE-2025-12817: Missing check...