GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: vault-secrets-operator, wazero, redpanda, spire-controller-manager, restic, vitess, docker-machine-driver-linode, neuvector-sigstore-interface, newrelic-nri-statsd, scuttle-fips, step-kms-plugin-fips, amass, blobfuse2-fips, prometheus-podman-exporter, kafka-proxy,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: vault-secrets-operator, wazero, redpanda, spire-controller-manager, restic, vitess, docker-machine-driver-linode, neuvector-sigstore-interface, newrelic-nri-statsd, scuttle-fips, step-kms-plugin-fips, amass, blobfuse2-fips, prometheus-podman-exporter, kafka-proxy,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: vault-secrets-operator, wazero, redpanda, spire-controller-manager, restic, vitess, docker-machine-driver-linode, neuvector-sigstore-interface, newrelic-nri-statsd, scuttle-fips, step-kms-plugin-fips, amass, blobfuse2-fips, prometheus-podman-exporter, kafka-proxy,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: vault-secrets-operator, wazero, redpanda, spire-controller-manager, restic, vitess, docker-machine-driver-linode, neuvector-sigstore-interface, newrelic-nri-statsd, scuttle-fips, step-kms-plugin-fips, amass, blobfuse2-fips, prometheus-podman-exporter, kafka-proxy,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: vault-secrets-operator, wazero, redpanda, spire-controller-manager, restic, vitess, docker-machine-driver-linode, neuvector-sigstore-interface, newrelic-nri-statsd, step-kms-plugin-fips, amass, blobfuse2-fips, prometheus-podman-exporter, kafka-proxy, ko-fips,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: vault-secrets-operator, wazero, redpanda, spire-controller-manager, restic, vitess, docker-machine-driver-linode, neuvector-sigstore-interface, newrelic-nri-statsd, scuttle-fips, step-kms-plugin-fips, amass, blobfuse2-fips, prometheus-podman-exporter, kafka-proxy,...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: tls: Handle the situation where data disappears from the TLS ULP. TLS assumes that it owns the receive queue of the TCP socket. This assumption cannot be guaranteed if the reader of the TCP socket entered before the TLS ULP was...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: EDAC/skxcommon: Fixed the general protection fault. After loading i10nmedac which automatically loads skxedaccommon, if only i10nmedac is unloaded, then reloading it and performing error injection testing may cause a general...

Cisco IOS XE Software Simple Network Management Protocol DoS (cisco-sa-snmpwred-x3MJyf5M)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected...

Security Bulletin: Multiple vulnerabilities in IBM DataPower OS kernel resulting in Denial of Service

Summary The following kernel issues may result in an unexpected device reload. Vulnerability Details CVEID:CVE-2024-42292 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: kobjectuevent: Fix OOB access within zapmodaliasenv zapmodaliasenv wrongly calculates size of...

SUSE CVE-2025-61909

Icinga 2 is an open source monitoring system. From 2.10.0 to before 2.15.1, 2.14.7, and 2.13.13, the safe-reload script also used during systemctl reload icinga2 and logrotate configuration shipped with Icinga 2 read the PID of the main Icinga 2 process from a PID file writable by the daemon user...

CVE-2025-61909

Icinga 2 is an open source monitoring system. From 2.10.0 to before 2.15.1, 2.14.7, and 2.13.13, the safe-reload script also used during systemctl reload icinga2 and logrotate configuration shipped with Icinga 2 read the PID of the main Icinga 2 process from a PID file writable by the daemon user...

CVE-2025-61909

Icinga 2 is an open source monitoring system. From 2.10.0 to before 2.15.1, 2.14.7, and 2.13.13, the safe-reload script also used during systemctl reload icinga2 and logrotate configuration shipped with Icinga 2 read the PID of the main Icinga 2 process from a PID file writable by the daemon user...

CVE-2025-61909

Icinga 2 is an open source monitoring system. From 2.10.0 to before 2.15.1, 2.14.7, and 2.13.13, the safe-reload script also used during systemctl reload icinga2 and logrotate configuration shipped with Icinga 2 read the PID of the main Icinga 2 process from a PID file writable by the daemon user...

UBUNTU-CVE-2025-61909

Icinga 2 is an open source monitoring system. From 2.10.0 to before 2.15.1, 2.14.7, and 2.13.13, the safe-reload script also used during systemctl reload icinga2 and logrotate configuration shipped with Icinga 2 read the PID of the main Icinga 2 process from a PID file writable by the daemon user...

CVE-2025-61909 Icinga 2 signals sent as root to processes based on PID file written by the Icinga 2 daemon user

Icinga 2 is an open source monitoring system. From 2.10.0 to before 2.15.1, 2.14.7, and 2.13.13, the safe-reload script also used during systemctl reload icinga2 and logrotate configuration shipped with Icinga 2 read the PID of the main Icinga 2 process from a PID file writable by the daemon user...

CVE-2025-61909

CVE-2025-61909 affects Icinga 2: from 2.10.0 up to but not including 2.15.1, and also affected 2.14.7 and 2.13.13, the safe-reload script (used during icinga2 reload) and the logrotate config read the main Icinga 2 process PID from a PID file writable by the daemon user, but send signals as root....

CVE-2025-61909 Icinga 2 signals sent as root to processes based on PID file written by the Icinga 2 daemon user

Icinga 2 is an open source monitoring system. From 2.10.0 to before 2.15.1, 2.14.7, and 2.13.13, the safe-reload script also used during systemctl reload icinga2 and logrotate configuration shipped with Icinga 2 read the PID of the main Icinga 2 process from a PID file writable by the daemon user...

CVE-2025-61909 Icinga 2 signals sent as root to processes based on PID file written by the Icinga 2 daemon user

Icinga 2 is an open source monitoring system. From 2.10.0 to before 2.15.1, 2.14.7, and 2.13.13, the safe-reload script also used during systemctl reload icinga2 and logrotate configuration shipped with Icinga 2 read the PID of the main Icinga 2 process from a PID file writable by the daemon user...

EUVD-2025-34791

Icinga 2 is an open source monitoring system. From 2.10.0 to before 2.15.1, 2.14.7, and 2.13.13, the safe-reload script also used during systemctl reload icinga2 and logrotate configuration shipped with Icinga 2 read the PID of the main Icinga 2 process from a PID file writable by the daemon user...