292 matches found
java-17-openjdk security update
An update is available for java-17-openjdk. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The java-17-openjdk packages provide the OpenJDK 17 Java Runtime...
RLSA-2026:0928 Important: java-21-openjdk security update
The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fixes: JDK: Improve JMX connections CVE-2026-21925 JDK: Improve HttpServer Request handling CVE-2026-21933 JDK: Enhance Certificate Checking CVE-2026-21945 libpng:...
RLSA-2026:0927 Important: java-17-openjdk security update
The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fixes: JDK: Improve JMX connections CVE-2026-21925 JDK: Improve HttpServer Request handling CVE-2026-21933 JDK: Enhance Certificate Checking CVE-2026-21945 libpn...
RHEL 8 / 9 : java-17-openjdk (RHSA-2026:0927)
The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:0927 advisory. The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security...
MiracleLinux 9 : openssh-8.7p1-30.el9 (AXSA:2023-6281:08)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6281:08 advisory. openssh: Remote code execution in ssh-agent PKCS11 support CVE-2023-38408 Tenable has extracted the preceding description block directly from the MiracleLinu...
MiracleLinux 8 : openssh-8.0p1-19.el8 (AXSA:2023-6282:09)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6282:09 advisory. openssh: Remote code execution in ssh-agent PKCS11 support CVE-2023-38408 Tenable has extracted the preceding description block directly from the MiracleLinu...
CVE-2025-24531
The CVE-2025-24531 entry concerns OpenSC pam_pkcs11 before 0.6.13, where pam_sm_authenticate() may return PAM_IGNORE in various error conditions (e.g., smartcard errors before login). This behavior can allow authentication bypass. The open/public data provided identifies the affected component an...
EUVD-2025-206298
In OpenSC pampkcs11 before 0.6.13, pamsmauthenticate wrongly returns PAMIGNORE in many error situations such as an error triggered by a smartcard before login, allowing authentication bypass...
Security update for gnutls
This update for gnutls fixes the following issues: CVE-2025-9820: Fixed buffer overflow in gnutlspkcs11tokeninit. bsc1254132 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comman...
SUSE-SU-2025:4525-1 Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2025-9820: Fixed buffer overflow in gnutlspkcs11tokeninit. bsc1254132...
SUSE SLES12: gnutls / libgnutls-devel / libgnutls-openssl-devel / etc (SUSE-SU-2025:4346-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:4346-1 advisory. - CVE-2025-9820: Fixed buffer overflow in gnutlspkcs11tokeninit. bsc1254132 Tenable has extracted the preceding description block directly from the SUS...
SUSE SLED15: gnutls / libgnutls-devel / libgnutls-devel-32bit / libgnutls30 / etc (SUSE-SU-2025:4323-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:4323-1 advisory. - CVE-2025-9820: Fixed buffer overflow in gnutlspkcs11tokeninit. bsc1254132 Tenable has extracted the...
Security update for gnutls
This update for gnutls fixes the following issues: CVE-2025-9820: Fixed buffer overflow in gnutlspkcs11tokeninit. bsc1254132 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comman...
Security update for gnutls
This update for gnutls fixes the following issues: CVE-2025-9820: Fixed buffer overflow in gnutlspkcs11tokeninit. bsc1254132 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comman...
Linux Distros Unpatched Vulnerability : CVE-2025-9820
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the GnuTLS library, specifically in the gnutlspkcs11tokeninit function that handles PKCS11 token initialization. When a token label longer...
FreeBSD : pkcs11-helper -- deserialize buffer overflow (1a46e84d-c406-11f0-b513-0da7be77c170)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 1a46e84d-c406-11f0-b513-0da7be77c170 advisory. Alon Bar-Lev reports: util: fix deserialize buffer overflow. thanks to Aarnav Bos. Tenable has extracte...
pkcs11-helper -- deserialize buffer overflow
Alon Bar-Lev reports: util: fix deserialize buffer overflow. thanks to Aarnav Bos...
Yubico YubiHSM 2 SDK YubiHSM Shell 2.4.0 Uninitialized Memory Read (YSA-2023-01)
The version of Yubico YubiHSM Shell, a component of YubiHSM 2 SDK, installed on the remote host is 2.4.0. It is, therefore, affected by an uninitlized memory read vulnerability: - The PKCS11 module of the YubiHSM 2 SDK through 2023.01 does not properly validate the length of specific read...