Updated golang packages fix security vulnerabilities

Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information. CVE-2025-4673. os: inconsistent handling of OCREATE|OEXCL on Unix and Windows os.OpenFilepath, os.OCREATE|OEXCL behaved differently on Unix and Windows systems when th...

RHEL 10 : kernel (RHSA-2025:7956)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:7956 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: dm-flakey: Fix memory...

MGASA-2025-0167 Updated sqlite3 packages fix security vulnerability

In SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3dbconfig in the C-language API can cause a denial of service application crash. An sznBig multiplication is not cast to a 64-bit integer, and consequently some memory allocations may be incorrect. CVE-2025-29088...

RHEL 8 : kernel (RHSA-2025:7901)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:7901 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: netfilter: ipset: add missing...

MGASA-2025-0161 Updated nodejs packages fix security vulnerabilities

Corrupted pointer in node::fs::ReadFileUtf8const FunctionCallbackInfo& args when args0 is a string. CVE-2025-23165 Improper error handling in async cryptographic operations crashes process. CVE-2025-23166 Improper HTTP header block termination in llhttp. CVE-2025-23167...

Oracle Linux 9 : kernel (ELSA-2025-6966)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-6966 advisory. - net: stmmac: dwmac-tegra: Read iommu stream id from device tree Izabela Bakollari RHEL-75649 CVE-2025-21663 - net: stmmac: Fix zero-division error wh...

ape-dasy (=0.1.0), avotes-parser-cli (>=0.5.5.post5 <=0.5.6) +7 more potentially affected by CVE-2025-47285 via vyper (>=0.3.9 <=0.4.1)

vyper PYPI version =0.3.9, =0.5.5.post5, =0.5.5.post4, =1.20.7, =0.0.1, =0.3.4, =0.8.31, =0.0.9, =3.4.7, =4.6.1 Source cves: CVE-2025-47285 Source advisory: SNYK:PYTHON-VYPER-10183408...

Updated java-1.8.0-openjdk, java-11-openjdk, java-17-openjdk & java-latest-openjdk packages fix security vulnerabilities

Better TLS connection support. CVE-2025-21587 Improve compiler transformations. CVE-2025-30691 Enhance Buffered Image handling. CVE-2025-30698 The updated timezone data are needed by the new Java packages...

CVE-2025-4432 vulnerabilities

Vulnerabilities for packages: sqlx, shadowsocks-rust, samply, kdash, sccache, wash, qdrant, pixi, wasm-pack, rustup, rustls-ffi, nushell, lychee, oranda, atuin, linkerd2-proxy, tealdeer, zizmor, ntpd-rs, parseable, uv, wasmtime, zola, wadm, wasmcloud, deno, buck2, cargo-audit, xh,...

Debian: Security Advisory (DLA-4157-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-VVGC-356P-C3XW vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-web, haproxy-ingress, flux-image-reflector-controller-fips, vault-fips, temporal-ui-server-fips, karpenter, net-kourier-fips, prometheus-mongodb-exporter-fips, cass-operator-fips-no-pvc-delete, flux-helm-controller-fips,...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: kubescape, consul-k8s-fips, chartmuseum, chart-testing, flux-source-controller-fips, zarf, helm-operator, cert-manager-cmctl, cert-manager, trivy-fips, tw, flux-helm-controller-fips, k9s, k8ssandra-client-fips, trivy, helm-operator-fips, zot, helm-push,...

Updated augeas packages fix security vulnerability

Hercules Augeas fa.c recaseexpand null pointer dereference. CVE-2025-2588...

CVE-2025-30204 vulnerabilities

Vulnerabilities for packages: opencost, step-fips, terraform, actions-runner-controller, chartmuseum, buildkitd, flux-image-reflector-controller-fips, aws-eks-pod-identity-agent-fips, octo-sts, crossplane-provider-azure, filebrowser, mc-fips, minio, vault-fips, zarf, rekor, ksops, mattermost-fips...

MGASA-2025-0103 Updated libreoffice packages fix security vulnerability

Macro URL arbitrary script execution. CVE-2025-1080...

MGASA-2025-0100 Updated php packages fix security vulnerabilities

Bugs and security with streams have been fixed...

MGASA-2025-0097 Updated man2html packages fix security vulnerability

In man2html 1.6g, a specific string being read in from a file will overwrite the size parameter in the top chunk of the heap. This at least causes the program to segmentation abort if the heap size parameter isn't aligned correctly. In versions before GLIBC version 2.29 and if aligned correctly, ...

CVE-2025-22870 vulnerabilities

Vulnerabilities for packages: rootlesskit, envoy-ratelimit, malcontent, cluster-proportional-autoscaler, certificate-transparency, harbor-scanner-trivy, flyte, cluster-api-aws-controller, newrelic-infrastructure-agent, cert-manager-istio-csr, grafana-agent-operator, melange, wave, dex,...

GHSA-4P46-PWFR-66X6 vulnerabilities

Vulnerabilities for packages: uv, qdrant, ztunnel, ntpd-rs, tealdeer, linkerd-extension-init, rustls-ffi, wadm, wasmtime, xh, wasm-pack, fnm, samply, parseable, atuin, oranda, rye, nushell, pixi, kdash, cargo-audit, lychee, rustup, buck2, zed, zizmor, sccache, wash, shadowsocks-rust, sqlx,...

Malware Infects Linux and macOS via Typosquatted Go Packages

Socket exposes a typosquatting campaign delivering malware to Linux and macOS systems via malicious Go packages. Discover the…...