USN-7885-1: OpenJDK 21 vulnerabilities

Jinfeng Guo discovered that the Security component of OpenJDK 21 did not correctly handle certain representations of encoded strings. An unauthenticated remote attacker could possibly use this issue to modify files or leak sensitive information. CVE-2025-53057 Darius Bohni discovered that the JAX...

Security update for cups-filters

This update for cups-filters fixes the following issues: CVE-2025-64503: Fixed out-of-bounds write in pdftoraster tool bsc1253374 CVE-2025-57812: Fixed multiple TIFF-related issues in libcupsfilters bsc1253373 CVE-2025-64524: Fixed out-of-bounds write de to use of unvalidated length parameter in...

SUSE-SU-2025:4198-1 Security update for cups-filters

This update for cups-filters fixes the following issues: - CVE-2025-64503: Fixed out-of-bounds write in pdftoraster tool bsc1253374 - CVE-2025-57812: Fixed multiple TIFF-related issues in libcupsfilters bsc1253373 - CVE-2025-64524: Fixed out-of-bounds write de to use of unvalidated length paramet...

SUSE-SU-2025:4195-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: - Update Mozilla Thunderbird to version 140.5 bsc1253188 - CVE-2025-13012: Race condition in the Graphics component. - CVE-2025-13016: Incorrect boundary conditions in the JavaScript: WebAssembly component. - CVE-2025-13017: Same-orig...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the setBit function in the include/trace/events/fscache.h module of the Linux kernel’s firmware is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Fedora 41 : kubernetes1.32 (2025-547f14aef4)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-547f14aef4 advisory. - Update to release v1.32.10 - Resolves: rhbz2414539 - Resolves: rhbz2398587, rhbz2398848, rhbz2399249, rhbz2399522 - Resolves: rhbz2399703,...

EulerOS 2.0 SP13 : kernel (EulerOS-SA-2025-2436)

According to the versions of the kernel package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : KVM: VMX: Do all initialization before exposing /dev/kvm to userspaceCVE-2022-49932 drivers:md:fix a potential use-after-free bugCVE-2022-50022 cep...

RockyLinux 8 : thunderbird (RLSA-2025:21881)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:21881 advisory. firefox: Mitigation bypass in the DOM: Security component CVE-2025-13018 firefox: Use-after-free in the Audio/Video component CVE-2025-13014 firefox:...

RockyLinux 10 : thunderbird (RLSA-2025:21843)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:21843 advisory. firefox: Mitigation bypass in the DOM: Security component CVE-2025-13018 firefox: Use-after-free in the Audio/Video component CVE-2025-13014 firefox:...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : cups-filters (SUSE-SU-2025:4158-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4158-1 advisory. - CVE-2025-64503: Fixed out-of-bounds write in pdftoraster tool bsc1253374 - CVE-2025-57812: Fix...

Ubuntu 24.04 LTS / 25.04 / 25.10 : libcupsfilters vulnerabilities (USN-7877-1)

The remote Ubuntu 24.04 LTS / 25.04 / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7877-1 advisory. It was discovered that libcupsfilters incorrectly handled certain malformed TIFF image files. A remote attacker could use this issue to...

SUSE-SU-2025:4158-1 Security update for cups-filters

This update for cups-filters fixes the following issues: - CVE-2025-64503: Fixed out-of-bounds write in pdftoraster tool bsc1253374 - CVE-2025-57812: Fixed multiple TIFF-related issues in libcupsfilters bsc1253373 - CVE-2025-64524: Fixed out-of-bounds write de to use of unvalidated length paramet...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

OPENSUSE-SU-2025:15751-1 libipa_hbac-devel-2.11.1-2.1 on GA media

These are all security issues fixed in the libipahbac-devel-2.11.1-2.1 package on the GA media of openSUSE Tumbleweed...

TencentOS Server 4: microcode_ctl (TSSA-2025:0227)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0227 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

TencentOS Server 3: grub2 (TSSA-2022:0064)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0064 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

TencentOS Server 3: krb5 (TSSA-2024:0399)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0399 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

TencentOS Server 2: firefox (TSSA-2024:0530)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0530 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

TencentOS Server 4: rlottie (TSSA-2025:0561)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0561 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...