USN-7673-1: CRaC JDK 21 vulnerabilities

It was discovered that the 2D component of CRaC JDK 21 did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2025-30749, CVE-2025-50106 VMashroor Hasan Bhuiyan discovered that the JSSE...

nodejs:22 security update

nodejs 1:22.16.0-2 - Patch fix for sqlite CVE-2025-6965 Resolves: RHEL-103835 1:22.15-1-1 - Update to 22.16.0 Fixes: CVE-2025-23166 - Resolves: RHEL-91596 RHEL-92859 1:22.15.0-1 - Update to 22.15.0 - Drop upstream patches 1:22.13.1-4 - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87300...

RHEL 7 / 8 / 9 : Red Hat JBoss Web Server 5.8.5 (RHSA-2025:11695)

The remote Redhat Enterprise Linux 7 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:11695 advisory. Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised o...

RHEL 9 : kernel (RHSA-2025:11810)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:11810 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: drm/amd/display: Implement...

ALSA-2025:11861 Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: media: uvcvideo: Fix double free in error path CVE-2024-57980 kernel: wifi: iwlwifi: limit printed string from FW file CVE-2025-21905 kernel: RDMA/mlx5: Fix pagesize variable overflow...

RHEL 9 : kernel (RHSA-2025:11861)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:11861 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: media: uvcvideo: Fix double...

OPENSUSE-SU-2025:15389-1 forgejo-longterm-11.0.3-1.1 on GA media

These are all security issues fixed in the forgejo-longterm-11.0.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15390-1 java-11-openj9-11.0.28.0-1.1 on GA media

These are all security issues fixed in the java-11-openj9-11.0.28.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15391-1 java-17-openj9-17.0.16.0-1.1 on GA media

These are all security issues fixed in the java-17-openj9-17.0.16.0-1.1 package on the GA media of openSUSE Tumbleweed...

Security update for opera (important)

openSUSE Security Update: Security update for opera Announcement ID: openSUSE-SU-2025:0265-1 Rating: important References: Cross-References: CVE-2025-4664 CVE-2025-5419 Affected Products: openSUSE Leap 15.6:NonFree An update that fixes two vulnerabilities is now available. Description: This updat...

Security update for varnish (important)

openSUSE Security Update: Security update for varnish Announcement ID: openSUSE-SU-2025:0179-1 Rating: important References: 1216123 1221942 1239892 Cross-References: CVE-2013-4484 CVE-2023-44487 CVE-2024-30156 CVE-2025-30346 CVSS scores: CVE-2023-44487 SUSE: 7.5...

OPENSUSE-SU-2025:15393-1 java-21-openj9-21.0.8.0-1.1 on GA media

These are all security issues fixed in the java-21-openj9-21.0.8.0-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-54378 HAX CMS Backend Lacks Comprehensive Authorization Checks

HAX CMS allows you to manage your microsite universe with PHP or NodeJs backends. In versions 11.0.13 and below of haxcms-nodejs and versions 11.0.8 and below of haxcms-php, API endpoints do not perform authorization checks when interacting with a resource. Both the JS and PHP versions of the CMS...

CVE-2025-54378

CVE-2025-54378 affects HAX CMS backends (nodejs and PHP). The issue is that API endpoints do not verify authorization for resource interactions, only checking authentication, allowing an authenticated user to perform privileged operations. Affected versions: haxcms-nodejs ≤ 11.0.13 and haxcms-php...

OPENSUSE-SU-2025:15388-1 rpi-imager-1.9.5-1.1 on GA media

These are all security issues fixed in the rpi-imager-1.9.5-1.1 package on the GA media of openSUSE Tumbleweed...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2025:0187-1 Rating: important References: Affected Products: openSUSE Backports SLE-15-SP6 An update that contains security fixes can now be installed. Description: Chromium was updated to 137.0.7151.68 stable...

OPENSUSE-SU-2025:15387-1 libmozjs-128-0-128.13.0-1.1 on GA media

These are all security issues fixed in the libmozjs-128-0-128.13.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15386-1 MozillaFirefox-141.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-141.0-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-32019

Harbor is an open source trusted cloud native registry project that stores, signs, and scans content. Versions 2.11.2 and below, as well as versions 2.12.0-rc1 and 2.13.0-rc1, contain a vulnerability where the markdown field in the info tab page can be exploited to inject XSS code. This is fixed ...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager (CVE-2024-56339)

Summary IBM WebSphere Application Server is used by IBM Tivoli System Automation Application Manager and is vulnerable to a security bypass caused by a failure to honor security configuration. Required fixes for affected WebSphere Application Server has been published in the security bulletin lin...