Advisory ROSA-SA-2025-2904

Software: openssl 1.1.1k OS: ROSA Virtualization 3.0 packageevrstring: openssl-1.1.1k-12.0.1.rv30 CVE-ID: CVE-2009-1387 BDU-ID: 2015-09404 CVE-Crit: MEDIUM CVE-DESC.: Multiple vulnerabilities in the openssl package up to version 0.9.8l-r2 of the Gentoo Linux operating system, the exploitation of...

Advisory ROSA-SA-2025-2903

Software: openssl 1.1.1k OS: ROSA Virtualization 2.1 packageevrstring: openssl-1.1.1.1k-9.rv3 CVE-ID: CVE-2009-1387 BDU-ID: 2015-09404 CVE-Crit: MEDIUM CVE-DESC.: Multiple vulnerabilities in the openssl package up to version 0.9.8l-r2 of the Gentoo Linux operating system, the exploitation of whic...

GLSA-202506-13 : Konsole: Code execution

The remote host is affected by the vulnerability described in GLSA-202506-13 Konsole: Code execution Konsole supports loading URLs from the scheme handlers such as telnet://URL. This can be executed regardless of whether the telnet binary is available. It would fallback to bash in that case and...

GLSA-202506-12 : sysstat: Arbitrary Code Execution

The remote host is affected by the vulnerability described in GLSA-202506-12 sysstat: Arbitrary Code Execution A vulnerability has been discovered in sysstat. Please review the CVE identifier referenced below for details. This CVE improves on an incomplete fix for CVE-2022-39377. Tenable has...

CVE-2005-4443

Untrusted search path vulnerability in Gauche before 0.8.6-r1 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH...

CVE-2005-2811

Untrusted search path vulnerability in Net-SNMP 5.2.1.2 and earlier, on Gentoo Linux, installs certain Perl modules with an insecure DTRPATH, which could allow local users to gain privileges...

GLSA-202505-10 : Tracker miners: Sandbox weakness

The remote host is affected by the vulnerability described in GLSA-202505-10 Tracker miners: Sandbox weakness A vulnerability has been discovered in Tracker minders. Please review the CVE identifier referenced below for details. Tenable has extracted the preceding description block directly from...

GLSA-202505-07 : FreeType: Remote Code Execution

The remote host is affected by the vulnerability described in GLSA-202505-07 FreeType: Remote Code Execution Multiple vulnerabilities have been discovered in FreeType. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly fr...

GLSA-202505-11 : Node.js: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202505-11 Node.js: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Node.js. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly...

GLSA-202505-06 : glibc: Buffer Overflow

The remote host is affected by the vulnerability described in GLSA-202505-06 glibc: Buffer Overflow A vulnerability has been discovered in glibc. Please review the CVE identifier referenced below for details. Tenable has extracted the preceding description block directly from the Gentoo Linux...

GLSA-202505-02 : Mozilla Firefox: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202505-02 Mozilla Firefox: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Mozilla Firefox. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description...

GLSA-202505-01 : PAM: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202505-01 PAM: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in PAM. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from the...

GLSA-202505-04 : NVIDIA Drivers: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202505-04 NVIDIA Drivers: Multiple Vulnerabilities A vulnerability has been discovered in NVIDIA Drivers. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block direct...

GLSA-202505-03 : Mozilla Thunderbird: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202505-03 Mozilla Thunderbird: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Mozilla Thunderbird. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding...

GLSA-202504-01 : XZ Utils: Use after free

The remote host is affected by the vulnerability described in GLSA-202504-01 XZ Utils: Use after free A use-after-free has been discovered in XZ utils. Please review the CVE identifier referenced below for details. Tenable has extracted the preceding description block directly from the Gentoo Lin...

World Writable Directory in /var/log/below Allows Local Privilege Escalation

Below is a tool for recording and displaying system data like hardware utilization and cgroup information on Linux. Symlink Attack in /var/log/below/errorroot.log Below's systemd service runs with full root privileges. It attempts to create a world-writable directory in /var/log/below. Even if th...

GLSA-202502-01 : OpenSSH: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202502-01 OpenSSH: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in OpenSSH. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly...

GLSA-202501-09 : QtWebEngine: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202501-09 QtWebEngine: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in QtWebEngine. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block...

GLSA-202501-04 : Yubico pam-u2f: Partial Authentication Bypass

The remote host is affected by the vulnerability described in GLSA-202501-04 Yubico pam-u2f: Partial Authentication Bypass Multiple vulnerabilities have been discovered in Yubico pam-u2f. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding descripti...

GLSA-202501-03 : pip: arbitrary configuration injection

The remote host is affected by the vulnerability described in GLSA-202501-03 pip: arbitrary configuration injection Multiple vulnerabilities have been discovered in pip. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly...