Fedora 42 : bind / bind-dyndb-ldap (2025-92566203fd)

The remote Fedora 42 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2025-92566203fd advisory. Update to 9.18.41 rhbz2405786 Security fixes: - DNSSEC validation fails if matching but invalid DNSKEY is found. CVE-2025-8677 - Address various...

CVE-2025-58183

tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a...

CVE-2025-64103

CVE-2025-64103 concerns Zitadel where, starting from versions 2.53.6, 2.54.3, and 2.55.0, MFA could be bypassed if the login policy did not explicitly require MFA, allowing sessions authenticated with a single factor to remain valid. An attacker could target a six‑digit TOTP code and bypass passw...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.51 bug fix and security update

Red Hat OpenShift Container Platform release 4.16.51 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...

CVE-2025-11702

GitLab has remediated an issue in EE affecting all versions from 17.1 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker with specific permissions to hijack project runners from other projects...

RHEL 9 : kernel (RHSA-2025:19224)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:19224 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: HID: core: Harden s32ton...

Slackware Linux 15.0 / current tigervnc Multiple Vulnerabilities (SSA:2025-302-02)

The version of tigervnc installed on the remote host is prior to 1.12.0 / 1.15.0. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-302-02 advisory. New tigervnc packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted...

OPENSUSE-SU-2025:15683-1 xorg-x11-server-21.1.15-7.1 on GA media

These are all security issues fixed in the xorg-x11-server-21.1.15-7.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15675-1 coreboot-utils-25.09-2.1 on GA media

These are all security issues fixed in the coreboot-utils-25.09-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15679-1 libmozjs-128-0-128.14.0-2.1 on GA media

These are all security issues fixed in the libmozjs-128-0-128.14.0-2.1 package on the GA media of openSUSE Tumbleweed...

chromium -- multiple security fixes

Chrome Releases reports: This update includes 20 security fixes: 447613211 High CVE-2025-12428: Type Confusion in V8. Reported by Man Yue Mo of GitHub Security Lab on 2025-09-26 450618029 High CVE-2025-12429: Inappropriate implementation in V8. Reported by Aorui Zhang on 2025-10-10 442860743 High...

OPENSUSE-SU-2025:15676-1 dovecot24-2.4.2-1.1 on GA media

These are all security issues fixed in the dovecot24-2.4.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15681-1 strongswan-6.0.3-1.1 on GA media

These are all security issues fixed in the strongswan-6.0.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15684-1 xwayland-24.1.8-4.1 on GA media

These are all security issues fixed in the xwayland-24.1.8-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15677-1 kea-3.0.2-1.1 on GA media

These are all security issues fixed in the kea-3.0.2-1.1 package on the GA media of openSUSE Tumbleweed...

EUVD-2025-36557

HP ThinPro 8.1 System management application failed to verify user's true id. HP has released HP ThinPro 8.1 SP8, which includes updates to mitigate potential vulnerabilities...

CVE-2021-20206 affecting package buildah for versions less than 1.41.4-2

CVE-2021-20206 affecting package buildah for versions less than 1.41.4-2. An upgraded version of the package is available that resolves this issue...

CVE-2025-11374

CVE-2025-11374 affects HashiCorp Consul and Consul Enterprise, specifically the key/value endpoint, due to incorrect Content Length header validation leading to DoS. IBM’s security bulletin documents affected versions: Consul Community Edition 0.0.1–1.21.5 and Consul Enterprise 1.21.0–1.21.51.20....

Consul's KV endpoint is vulnerable to denial of service

Summary Consul and Consul Enterprise’s “Consul” key/value endpoint is vulnerable to denial of service DoS due to incorrect Content Length header validation. This vulnerability, CVE-2025-11374, is fixed in Consul Community Edition 1.22.0 and Consul Enterprise 1.22.0, 1.21.6, 1.20.8 and 1.18.12...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.6 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...