Security update for govulncheck-vulndb

This update for govulncheck-vulndb fixes the following issues: Update to version 0.0.20251120T220319 2025-11-20T22:03:19Z. jscPED-11136: GO-2023-2331 GO-2024-2587 GO-2025-3770 GO-2025-4007 GO-2025-4134 GO-2025-4135 Update to version 0.0.20251118T154415 2025-11-18T15:44:15Z. jscPED-11136:...

OPENSUSE-SU-2025:15767-1 openbao-2.4.4-1.1 on GA media

These are all security issues fixed in the openbao-2.4.4-1.1 package on the GA media of openSUSE Tumbleweed...

RHEL 9 : kernel (RHSA-2025:22095)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:22095 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net/sched: actct: fix skb lea...

Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise kernel 6.4.0-150600.10.34 fixes various security issues The following security issues were fixed: CVE-2025-23145: mptcp: fix NULL pointer in canacceptnewsubflow bsc1242882. CVE-2025-38500: xfrm: interface: fix use-after-free after changing collectmd xfrm...

USN-7885-1: OpenJDK 21 vulnerabilities

Jinfeng Guo discovered that the Security component of OpenJDK 21 did not correctly handle certain representations of encoded strings. An unauthenticated remote attacker could possibly use this issue to modify files or leak sensitive information. CVE-2025-53057 Darius Bohni discovered that the JAX...

Security update for cups-filters

This update for cups-filters fixes the following issues: CVE-2025-64503: Fixed out-of-bounds write in pdftoraster tool bsc1253374 CVE-2025-57812: Fixed multiple TIFF-related issues in libcupsfilters bsc1253373 CVE-2025-64524: Fixed out-of-bounds write de to use of unvalidated length parameter in...

SUSE-SU-2025:4198-1 Security update for cups-filters

This update for cups-filters fixes the following issues: - CVE-2025-64503: Fixed out-of-bounds write in pdftoraster tool bsc1253374 - CVE-2025-57812: Fixed multiple TIFF-related issues in libcupsfilters bsc1253373 - CVE-2025-64524: Fixed out-of-bounds write de to use of unvalidated length paramet...

SUSE-SU-2025:4195-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: - Update Mozilla Thunderbird to version 140.5 bsc1253188 - CVE-2025-13012: Race condition in the Graphics component. - CVE-2025-13016: Incorrect boundary conditions in the JavaScript: WebAssembly component. - CVE-2025-13017: Same-orig...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the setBit function in the include/trace/events/fscache.h module of the Linux kernel’s firmware is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Fedora 41 : kubernetes1.32 (2025-547f14aef4)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-547f14aef4 advisory. - Update to release v1.32.10 - Resolves: rhbz2414539 - Resolves: rhbz2398587, rhbz2398848, rhbz2399249, rhbz2399522 - Resolves: rhbz2399703,...

Ubuntu 24.04 LTS / 25.04 / 25.10 : libcupsfilters vulnerabilities (USN-7877-1)

The remote Ubuntu 24.04 LTS / 25.04 / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7877-1 advisory. It was discovered that libcupsfilters incorrectly handled certain malformed TIFF image files. A remote attacker could use this issue to...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : cups-filters (SUSE-SU-2025:4158-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4158-1 advisory. - CVE-2025-64503: Fixed out-of-bounds write in pdftoraster tool bsc1253374 - CVE-2025-57812: Fix...

RockyLinux 10 : thunderbird (RLSA-2025:21843)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:21843 advisory. firefox: Mitigation bypass in the DOM: Security component CVE-2025-13018 firefox: Use-after-free in the Audio/Video component CVE-2025-13014 firefox:...

RockyLinux 8 : thunderbird (RLSA-2025:21881)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:21881 advisory. firefox: Mitigation bypass in the DOM: Security component CVE-2025-13018 firefox: Use-after-free in the Audio/Video component CVE-2025-13014 firefox:...

EulerOS 2.0 SP13 : kernel (EulerOS-SA-2025-2436)

According to the versions of the kernel package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : KVM: VMX: Do all initialization before exposing /dev/kvm to userspaceCVE-2022-49932 drivers:md:fix a potential use-after-free bugCVE-2022-50022 cep...

SUSE-SU-2025:4158-1 Security update for cups-filters

This update for cups-filters fixes the following issues: - CVE-2025-64503: Fixed out-of-bounds write in pdftoraster tool bsc1253374 - CVE-2025-57812: Fixed multiple TIFF-related issues in libcupsfilters bsc1253373 - CVE-2025-64524: Fixed out-of-bounds write de to use of unvalidated length paramet...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

OPENSUSE-SU-2025:15751-1 libipa_hbac-devel-2.11.1-2.1 on GA media

These are all security issues fixed in the libipahbac-devel-2.11.1-2.1 package on the GA media of openSUSE Tumbleweed...

wolfssl -- multiple issues

wolfSSL blog reports: This release includes multiple fixes across TLS 1.2, TLS 1.3, X25519, XChaCha20-Poly1305, and PSK processing. Highlights include: A timing-side-channel issue in X25519 specifically affecting Xtensa-based ESP32 devices. Low-memory X25519 implementations are now the default fo...