March 11, 2025—KB5053627 (Security-only update)

None None...

February 11, 2025—KB5051979 (OS Build 20348.3207)

None None...

February 11, 2025—KB5051987 (OS Build 26100.3194)

None None...

March 11, 2025—KB5053599 (OS Build 25398.1486)

None None...

March 11, 2025—KB5053995 (Security-only update)

None None...

February 11, 2025—KB5051989 (OS Builds 22621.4890 and 22631.4890)

None None...

March 11, 2025—KB5053620 (Monthly Rollup)

None None...

USN-7340-1: OpenVPN vulnerabilities

It was discovered that OpenVPN did not perform proper input validation when generating a TLS key under certain configuration, which could lead to a buffer overflow. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu...

OPENSUSE-SU-2025:14871-1 podman-5.4.0-3.1 on GA media

These are all security issues fixed in the podman-5.4.0-3.1 package on the GA media of openSUSE Tumbleweed...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2025-20153)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20153 advisory. - ipv6: fix possible UAF in ip6finishoutput2 Eric Dumazet Orabug: 37029070 CVE-2024-44986 - dmaengine: atxdmac: avoid nullprtderef in...

Kibana 8.15.x < 8.15.1 Multiples Vulnerabilities

According to its self-reported version number, the Kibana application running on the remote host is 8.15.x prior to 8.15.1. It is, therefore, affected by Multiples Vulnerabilities. - A deserialization issue in Kibana can lead to arbitrary code execution when Kibana attempts to parse a YAML docume...

Kibana 7.x < 7.17.23 Multiples Vulnerabilities

According to its self-reported version number, the Kibana application running on the remote host is 7.x prior to 7.17.23 or 8.x prior to 8.14.2. It is, therefore, affected by Multiples Vulnerabilities. - An allocation of resources without limits or throttling in Kibana can lead to a crash caused ...

OPENSUSE-SU-2025:14876-1 ruby3.4-rubygem-rack-2.2-2.2.13-1.1 on GA media

These are all security issues fixed in the ruby3.4-rubygem-rack-2.2-2.2.13-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14867-1 amazon-ssm-agent-3.3.1957.0-2.1 on GA media

These are all security issues fixed in the amazon-ssm-agent-3.3.1957.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14870-1 google-osconfig-agent-20250115.01-3.1 on GA media

These are all security issues fixed in the google-osconfig-agent-20250115.01-3.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-27912

An issue was discovered in Datalust Seq before 2024.3.13545. Missing Content-Type validation can lead to CSRF when 1 Entra ID or OpenID Connect authentication is in use and a user visits a compromised/malicious site, or 2 when username/password or Active Directory authentication is in use and a...

OPENSUSE-SU-2025:14873-1 python312-3.12.9-2.1 on GA media

These are all security issues fixed in the python312-3.12.9-2.1 package on the GA media of openSUSE Tumbleweed...

Debian dla-4084 : libmodbus-dev - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4084 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4084-1 [email protected]...

Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-7342-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7342-1 advisory. Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use...

Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-7332-2)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7332-2 advisory. Attila Szsz discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a...