EUVD-2014-3553

Malware in sbrugna...

EUVD-2011-4056

Malware in sbrugna...

Unity Linux 20.1070a Security Update: libssh (UTSA-2025-987418)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987418 advisory. A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the sshkdf function responsible for key derivation. Due to inconsiste...

curl: OpenSSL backend: X509 peer certificate not freed in ossl_get_channel_binding causes per-request memory leak (DoS risk for long-lived clients)

Summary: In curl’s OpenSSL backend, osslgetchannelbinding retains a new reference to the server’s X509 certificate via SSLget1peercertificate and never releases it. When Negotiate SPNEGO over TLS is in use, this path is invoked and leaks one X509 object per trigger. Over many requests in a...

CVE-2025-27237

In Zabbix Agent and Agent 2 on Windows, the OpenSSL configuration file is loaded from a path writable by low-privileged users, allowing malicious modification and potential local privilege escalation by injecting a DLL...

GHSA-9MRX-MQMG-GWJ9 vulnerabilities

Vulnerabilities for packages: openssl...

CVE-2025-9232 vulnerabilities

Vulnerabilities for packages: openssl...

GHSA-76R2-C3CG-F5R9 vulnerabilities

Vulnerabilities for packages: openssl...

CVE-2025-9230 vulnerabilities

Vulnerabilities for packages: openssl...

CVE-2025-9231 vulnerabilities

Vulnerabilities for packages: openssl...

GHSA-9MRX-MQMG-GWJ9 vulnerabilities

Vulnerabilities for packages: openssl...

CVE-2025-9232 vulnerabilities

Vulnerabilities for packages: openssl...

GHSA-76R2-C3CG-F5R9 vulnerabilities

Vulnerabilities for packages: openssl...

CVE-2025-9231 vulnerabilities

Vulnerabilities for packages: openssl...

CVE-2025-9230 vulnerabilities

Vulnerabilities for packages: openssl, authentik...

RockyLinux 9 : bootc (RLSA-2025:7160)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:7160 advisory. rust-openssl: rust openssl ssl::selectnextproto use after free CVE-2025-24898 Tenable has extracted the preceding description block directly from the RockyLinux...

Debian: Security Advisory (DLA-4321-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RockyLinux 9 : rust-bootupd (RLSA-2025:7241)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:7241 advisory. rust-openssl: rust openssl ssl::selectnextproto use after free CVE-2025-24898 Tenable has extracted the preceding description block directly from the RockyLinux...

RLSA-2025:7313 Moderate: keylime-agent-rust security update

Rust agent for Keylime Security Fixes: rust-openssl: rust openssl ssl::selectnextproto use after free CVE-2025-24898 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE pages listed in the References...

RLSA-2025:7241 Moderate: rust-bootupd security update

Bootloader updater Security Fixes: rust-openssl: rust openssl ssl::selectnextproto use after free CVE-2025-24898 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE pages listed in the References section...