Important: Red Hat Security Advisory: RHODF-4.15-RHEL-9 security update

An updated images are now available for RHODF-4.15-RHEL-9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the rawnand denali module could lead to resource management issues...

OPENSUSE-SU-2025:14838-1 libxkbfile-devel-1.1.3-2.1 on GA media

These are all security issues fixed in the libxkbfile-devel-1.1.3-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14841-1 xorg-x11-server-21.1.15-2.1 on GA media

These are all security issues fixed in the xorg-x11-server-21.1.15-2.1 package on the GA media of openSUSE Tumbleweed...

SUSE SLES15 Security Update : kernel (Live Patch 44 for SLE 15 SP3) (SUSE-SU-2025:0708-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0708-1 advisory. This update for the Linux Kernel 5.3.18-15030059161 fixes several issues. The following security issues were fixed: - CVE-2024-35789: wifi:...

OPENSUSE-SU-2025:14839-1 teleport-17.2.9-1.1 on GA media

These are all security issues fixed in the teleport-17.2.9-1.1 package on the GA media of openSUSE Tumbleweed...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the use of prandom in netfilter may lead to preemption issues...

PT-2025-8687 · WordPress · Sina Extension For Elementor

Name of the Vulnerable Software and Affected Versions: The Sina Extension for Elementor plugin for WordPress versions up to, and including, 3.6.0 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the plugin's Fancy Text, Countdow...

OPENSUSE-SU-2025:14837-1 libX11-6-1.8.11-2.1 on GA media

These are all security issues fixed in the libX11-6-1.8.11-2.1 package on the GA media of openSUSE Tumbleweed...

Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel vulnerabilities (USN-7303-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7303-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

Amazon Linux 2 : kernel (ALASKERNEL-5.15-2025-063)

The version of kernel installed on the remote host is prior to 5.15.178-120.178. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2025-063 advisory. Integer Overflow or Wraparound vulnerability in Linux kernel on x86 and ARM md, raid, raid5 modules allo...

RockyLinux 8 : mysql:8.0 (RLSA-2025:1673)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:1673 advisory. openssl: SSLselectnextproto buffer overread CVE-2024-5535 krb5: GSS message token handling CVE-2024-37371 curl: libcurl: ASN.1 date parser overread...

Amazon Linux 2 : firefox (ALASFIREFOX-2025-034)

The version of firefox installed on the remote host is prior to 128.7.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2FIREFOX-2025-034 advisory. The origin of an external protocol handler prompt could have been obscured using a data: URL within an iframe. Thi...

The vulnerability affects the implementation of the Lightweight Directory Access Protocol (LDAP) on Windows operating systems, allowing attackers to execute arbitrary code.

The vulnerability of the LDAP protocol implementation on the Windows operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

OPENSUSE-SU-2025:14842-1 xwayland-24.1.5-2.1 on GA media

These are all security issues fixed in the xwayland-24.1.5-2.1 package on the GA media of openSUSE Tumbleweed...

Amazon Linux 2 : php, --advisory ALAS2PHP8.2-2025-006 (ALASPHP8.2-2025-006)

The version of php installed on the remote host is prior to 8.2.27-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2PHP8.2-2025-006 advisory. The upstream advisory describes this issue as follows: A memory-related vulnerability in PHP's filter handling system,...

OPENSUSE-SU-2025:14840-1 trivy-0.59.1-1.1 on GA media

These are all security issues fixed in the trivy-0.59.1-1.1 package on the GA media of openSUSE Tumbleweed...

[slackware-security] tigervnc

New tigervnc packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: extra/tigervnc/tigervnc-1.12.0-i586-8slack15.0.txz: Rebuilt. Recompiled against xorg-server-1.20.14, including patches for security issues:...

CVE-2025-27148

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. On Unix-like systems, the system temporary directory can be created with open permissions that allow multiple users to create and delete files within it. This library initialization could be...

USN-7289-3: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - x86 architecture; - Block layer subsystem; - ACPI drivers; - GPU drivers; - HID subsystem; -...