Linux Distros Unpatched Vulnerability : CVE-2021-47059

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ss - fix result memory leak on error path This patch fixes a memory leak on an...

OPENSUSE-SU-2025:15431-1 nvidia-open-driver-G06-signed-default-devel-570.172.08-2.1 on GA media

These are all security issues fixed in the nvidia-open-driver-G06-signed-default-devel-570.172.08-2.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-54888

Fedify vulnerability CVE-2025-54888 is an authentication bypass in handleInboxInternal that lets an attacker impersonate any ActivityPub actor by sending forged activities signed with their own keys. The flaw processes an activity before verifying the signer’s ownership of the actor, enabling imp...

OPENSUSE-SU-2025:15430-1 texmaker-6.0.1-2.1 on GA media

These are all security issues fixed in the texmaker-6.0.1-2.1 package on the GA media of openSUSE Tumbleweed...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.15-2025-087 (ALASKERNEL-5.15-2025-087)

The version of kernel installed on the remote host is prior to 5.15.189-131.206. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2025-087 advisory. In the Linux kernel, the following vulnerability has been resolved: net: tap: NULL pointer derefence in...

Linux Distros Unpatched Vulnerability : CVE-2024-27432

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtkethsoc: fix PPE hanging issue A patch to resolve an issue was found in...

OPENSUSE-SU-2025:15427-1 ffmpeg-4-4.4.6-5.1 on GA media

These are all security issues fixed in the ffmpeg-4-4.4.6-5.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15428-1 net-tools-2.10-4.1 on GA media

These are all security issues fixed in the net-tools-2.10-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15429-1 python311-uv-0.8.8-1.1 on GA media

These are all security issues fixed in the python311-uv-0.8.8-1.1 package on the GA media of openSUSE Tumbleweed...

CLSA-2025-1754649468 Fix of 5 CVEs

OpenJDK 11.0.28 release, build 6. - CVE-2025-30749: Java 2D heap corruption, code execution/DoS - CVE-2025-30754: JSSE TLS handshake flaw, weakened encryption - CVE-2025-30761: nashorn sandbox bypass, code execution - CVE-2025-50059: HTTP client header bug, data leak - CVE-2025-50106: Glyph...

OPENSUSE-SU-2025:15422-1 go1.23-1.23.12-1.1 on GA media

These are all security issues fixed in the go1.23-1.23.12-1.1 package on the GA media of openSUSE Tumbleweed...

Oracle Linux 7 : java-1.8.0-openjdk (ELSA-2025-10861)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-10861 advisory. 1:1.8.0.462.b08-1.0.1 - Update to 8u462-b08 GA Orabug: 38248370 - Update release notes for 8u462-b08. - Require tzdata 2025b due to upstream inclusion...

Linux Distros Unpatched Vulnerability : CVE-2024-52006

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to...

OPENSUSE-SU-2025:15426-1 keylime-ima-policy-0.2.7+141-1.1 on GA media

These are all security issues fixed in the keylime-ima-policy-0.2.7+141-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15423-1 go1.24-1.24.6-1.1 on GA media

These are all security issues fixed in the go1.24-1.24.6-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-38368 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38368 affecting package kernel for versions less than 6.6.96.1-1. An upgraded version of the package is available that resolves this issue...

Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to Node.js (CVE-2025-23165 & CVE-2025-23166) )

Summary IBM App Connect Enterprise is vulnerable to Missing Release of Memory after Effective Lifetime and Uncaught Exception due to Node.js. Vulnerability Details CVEID:CVE-2025-23165 DESCRIPTION: In Node.js, the ReadFileUtf8 internal binding leaks memory due to a corrupted pointer in uvfss.file...

Important: Red Hat Security Advisory: Red Hat build of Quarkus 3.20.2 release and security update

An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more informatio...

Important: Red Hat Security Advisory: Red Hat build of Quarkus 3.15.6 release and security update

An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more informatio...

Security Bulletin: A vulnerability has been identified in IBM WebSphere Application Server used by IBM Rational ClearQuest (CVE-2025-36038)

Summary IBM WebSphere Application Server is used by the IBM Rational ClearQuest server. Information about security vulnerabilities affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...