[SECURITY] Fedora 42 Update: cri-o1.32-1.32.10-1.fc42

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

[SECURITY] Fedora 41 Update: dotnet10.0-10.0.100-1.fc41

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

[SECURITY] Fedora 41 Update: cri-o1.32-1.32.10-1.fc41

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

[SECURITY] Fedora 41 Update: cri-o1.34-1.34.2-1.fc41

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

EBPF-PATROL: Protective Agent for Threat Recognition and Overreach Limitation Using EBPF in Containerized and Virtualized Environments

With the increasing use and adoption of cloud and cloud-native computing, the underlying technologies i.e., containerization and virtualization have become foundational. However, strict isolation and maintaining runtime security in these environments has become increasingly challenging. Existing...

Fedora 42 : cri-o1.34 (2025-1e7710541e)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-1e7710541e advisory. - Update to release 1.34.2 - Resolves: rhbz2407595, rhbz2407866, rhbz2408142, rhbz2408577 - Resolves: rhbz2408640, rhbz2408703, rhbz2409050,...

TencentOS Server 3: fapolicyd (TSSA-2022:0253)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2022:0253 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

TencentOS Server 4: java-21-konajdk (TSSA-2025:0409)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0409 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

TencentOS Server 4: crun (TSSA-2025:0244)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0244 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

org.apache.causeway.core:causeway-core-config (2.0.0-rc3), org.apache.causeway.core:causeway-core-interaction (2.0.0-rc3) +111 more potentially affected by CVE-2025-64408 via org.apache.causeway.core:causeway-applib (2.0.0-rc3)

org.apache.causeway.core:causeway-applib MAVEN version 2.0.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.causeway.core:causeway-applib and may be impacted: - org.apache.causeway.core:causeway-core-config 2.0.0-rc3 -...

org.apache.causeway.core:causeway-core-config (2.0.0), org.apache.causeway.core:causeway-core-interaction (2.0.0) +118 more potentially affected by CVE-2025-64408 via org.apache.causeway.core:causeway-applib (2.0.0)

org.apache.causeway.core:causeway-applib MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.causeway.core:causeway-applib and may be impacted: - org.apache.causeway.core:causeway-core-config 2.0.0 -...

org.apache.causeway.core:causeway-core-config (2.0.0-rc2), org.apache.causeway.core:causeway-core-interaction (2.0.0-rc2) +110 more potentially affected by CVE-2025-64408 via org.apache.causeway.core:causeway-applib (2.0.0-rc2)

org.apache.causeway.core:causeway-applib MAVEN version 2.0.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.causeway.core:causeway-applib and may be impacted: - org.apache.causeway.core:causeway-core-config 2.0.0-rc2 -...

org.apache.causeway.core:causeway-core-interaction (>=4.0.0-m1, <=4.0.0-m2), org.apache.causeway.core:causeway-core-runtime (>=4.0.0-m1, <=4.0.0-m2) +87 more potentially affected by CVE-2025-64408 via org.apache.causeway.core:causeway-core-metamodel (>=4.0.0-m1, <=4.0.0-m2)

org.apache.causeway.core:causeway-core-metamodel MAVEN version =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0-m2 - org.apache.causeway.extensions:causeway-extensions-executionlog-appl...

SUSE-SU-2025:21031-1 Security update for libxslt

This update for libxslt fixes the following issues: Changes in libxslt: - CVE-2025-11731: Fixed type confusion in exsltFuncResultCompfunction leading to denial of service bsc1251979 - CVE-2025-10911: Fixed use-after-free with key data stored cross-RVT bsc1250553...

CVE-2025-12792

The Mac App Store distribution of the Canva for Mac desktop app before 1.117.1 was built without Hardened Runtime. A local threat actor with unprivileged access could execute arbitrary code that inherits the TCC Transparency, Consent, and Control permissions assigned to Canva...

CVE-2025-12792

The Mac App Store distribution of the Canva for Mac desktop app before 1.117.1 was built without Hardened Runtime. A local threat actor with unprivileged access could execute arbitrary code that inherits the TCC Transparency, Consent, and Control permissions assigned to Canva...

CVE-2025-12792

The Mac App Store distribution of the Canva for Mac desktop app before 1.117.1 was built without Hardened Runtime. A local threat actor with unprivileged access could execute arbitrary code that inherits the TCC Transparency, Consent, and Control permissions assigned to Canva...

CVE-2025-12792

The Mac App Store distribution of the Canva for Mac desktop app before 1.117.1 was built without Hardened Runtime. A local threat actor with unprivileged access could execute arbitrary code that inherits the TCC Transparency, Consent, and Control permissions assigned to Canva...

CVE-2025-12792

CVE-2025-12792 describes a vulnerability in the Mac App Store distribution of the Canva for Mac desktop app prior to 1.117.1. The issue stems from the app being built without Hardened Runtime, enabling a local threat actor with unprivileged access to execute arbitrary code that inherits the app’s...

EUVD-2025-197904

The Mac App Store distribution of the Canva for Mac desktop app before 1.117.1 was built without Hardened Runtime. A local threat actor with unprivileged access could execute arbitrary code that inherits the TCC Transparency, Consent, and Control permissions assigned to Canva...