Photon OS 4.0: Libtiff PHSA-2025-4.0-0897

An update of the libtiff package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0897. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Imagemagick PHSA-2025-4.0-0898

An update of the ImageMagick package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0898. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

This Week in Spring - November 4th, 2025

Hi, Spring fans! Welcome to another all-out installment of This Week in Spring wherein we attempt to recap all that's new and novel in the wild, wacky, and wonderful world of Springdom. And this week, I'm doing so from an airport in Switzerland, en route to Malmo, Sweden, for the amazing Oredev...

mediatek Chipsets 安全漏洞

MediaTek Chipsets is a series of chips from Chinese company MediaTek. A security vulnerability exists in mediatek Chipsets, which stems from reuse after release and could lead to local elevation of privilege...

mediatek Chipsets 安全漏洞

MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets, which stems from reuse after release and could lead to local elevation of privilege...

Photon OS 5.0: Imagemagick PHSA-2025-5.0-0664

An update of the ImageMagick package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0664. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

EUVD-2025-37501

A potential security vulnerability has been identified in the HP Client Management Script Library software, which might allow escalation of privilege during the installation process. HP is releasing software updates to mitigate the potential vulnerability...

kernel: kernfs: Fix UAF in polling when open file is released

A use-after-free race condition exists in the linux kernel such that When cgroup.pressure is disabled, it releases PSI triggers via cgroupfilerelease, Frees of-priv through kernfsdrainopenfiles leading to damage to the availability and integrity of the system...

CVE-2025-12623

CVE-2025-12623 affects the fushengqian fuint system, specifically the code path in fuint-application/src/main/java/com/fuint/module/clientApi/controller/ClientSignController.java (Authentication Token Handler). The Red Hat/NVD entries describe an authorization bypass that can be triggered remotel...

[SECURITY] Fedora 42 Update: rust-interpolator-0.5.0-3.fc42

Runtime format strings, fully compatible with std's macros...

[SECURITY] Fedora 42 Update: rust-astral-tokio-tar-0.5.6-1.fc42

A Rust implementation of an async TAR file reader and writer. This library does not currently handle compression, but it is abstract over all I/O readers and writers. Additionally, great lengths are taken to ensure that the entire contents are never required to be entirely resident in memory all ...

NetSurf 安全漏洞

NetSurf is a lightweight browser from the NetSurf organization. A security vulnerability exists in NetSurf version 3.11, which stems from a post-release reuse issue with the domnodesettextcontent function...

PT-2025-49375

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the KVM subsystem related to memory management. Specifically, the issue arises when unbinding a memslot from a guest memfd instance while the...

xorg-x11-server update

1.20.11-32 - CVE fix for: CVE-2025-62229 RHEL-119961, CVE-2025-62230 RHEL-120032, CVE-2025-62231 RHEL-125001...

Debian dla-4358 : wordpress - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4358 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-4358-1 [email protected]...

Fedora 43 : skopeo (2025-af04521261)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-af04521261 advisory. Security fix for CVE-2025-58189, CVE-2025-61725 Tenable has extracted the preceding description block directly from the Fedora security advisory. No...

ksmbd: prevent connection release during oplock break notification

...

[SECURITY] Fedora 41 Update: ruby-3.3.10-21.fc41

Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...

Astra Linux – Vulnerability in Apache2

Delayed memory release after the effective lifetime vulnerability in the Apache HTTP Server. This issue affects the Apache HTTP Server: from version 2.4.17 up to 2.4.63. Users are recommended to upgrade to version 2.4.64, which fixes this issue...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: The delay in putting pmc-idev into mlddeldelrec has been fixed. pmc-idev is still used in ip6mcclearsrc, just like in mldcleardelrec. Therefore, the reference to pmc-idev should be placed after the return of...