Photon OS 3.0: Ruby PHSA-2025-3.0-0816

An update of the ruby package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-3.0-0816. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Libsoup PHSA-2025-3.0-0815

An update of the libsoup package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-3.0-0815. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

java-21-openj9-21.0.6.0-1.1 on GA media (moderate)

java-21-openj9-21.0.6.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:14755-1 Rating: moderate Cross-References: CVE-2024-21208 CVE-2024-21217 CVE-2025-21502 CVSS scores: CVE-2024-21208 SUSE : 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2024-21208 SUSE : 6.3...

CGA-WPV6-G9CG-5X48

Bulletin has no description...

CGA-P72M-XPVJ-6RGJ

Bulletin has no description...

CGA-2QJ4-P7M6-3994

Bulletin has no description...

Updated qtbase5 & qtbase6 packages fix security vulnerabilities

network/access/http2/hpacktable.cpp has an incorrect HPack integer overflow check. CVE-2023-51714 A buffer overflow and application crash can occur via a crafted KTX image file. CVE-2024-25580 Code to make security-relevant decisions about an established connection may execute too early, because...

MGASA-2025-0048 Updated thunderbird packages fix security vulnerabilities

Use-after-free in XSLT. CVE-2025-1009 Use-after-free in Custom Highlight. CVE-2025-1010 A bug in WebAssembly code generation could result in a crash. CVE-2025-1011 Use-after-free during concurrent delazification. CVE-2025-1012 Potential double-free vulnerability in PKCS7 decryption handling...

MGASA-2025-0045 Updated rootcerts, nss & firefox packages fix security vulnerabilities

Use-after-free in XSLT. CVE-2025-1009 Use-after-free in Custom Highlight. CVE-2025-1010 A bug in WebAssembly code generation could result in a crash. CVE-2025-1011 Use-after-free during concurrent delazification. CVE-2025-1012 Potential double-free vulnerability in PKCS7 decryption handling...

MGASA-2025-0046 Updated qtbase5 & qtbase6 packages fix security vulnerabilities

network/access/http2/hpacktable.cpp has an incorrect HPack integer overflow check. CVE-2023-51714 A buffer overflow and application crash can occur via a crafted KTX image file. CVE-2024-25580 Code to make security-relevant decisions about an established connection may execute too early, because...

Updated thunderbird packages fix security vulnerabilities

Use-after-free in XSLT. CVE-2025-1009 Use-after-free in Custom Highlight. CVE-2025-1010 A bug in WebAssembly code generation could result in a crash. CVE-2025-1011 Use-after-free during concurrent delazification. CVE-2025-1012 Potential double-free vulnerability in PKCS7 decryption handling...

Updated mariadb packages fix security vulnerability

Bug fix release which fixes some memory leaks and crashes...

Fedora 40 : php-phpseclib (2025-b38cbff99d)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-b38cbff99d advisory. Security fix for CVE-2023-52892, CVE-2024-27354 Tenable has extracted the preceding description block directly from the Fedora security advisory. No...

Updated nodejs packages fix security vulnerabilities

Worker permission bypass via InternalWorker leak in diagnostics. CVE-2025-23083 GOAWAY HTTP/2 frames cause memory leak outside heap. CVE-2025-23085...

MGASA-2025-0041 Updated nodejs packages fix security vulnerabilities

Worker permission bypass via InternalWorker leak in diagnostics. CVE-2025-23083 GOAWAY HTTP/2 frames cause memory leak outside heap. CVE-2025-23085...

Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFix for Junuary 2025.

Summary Security vulnerabilities are addressed with IBM Business Automation Insights 24.0.0-IF002 Vulnerability Details CVEID:CVE-2024-47561 DESCRIPTION: Apache Avro could allow a remote authenticated attacker to execute arbitrary code on the system, caused by a flaw in schema parsing in the Java...

Security Bulletin: Multiple vulnerabilities in spring packaged with CMIS affect IBM Business Automation Workflow - CVE-2024-22262, CVE-2024-38809

Summary IBM Business Automation Workflow is vulnerable repackages a FileNet Content Manager's CMIS interface, which in turn repackages parts of a version of the Spring framework. Vulnerabilities have been reported for spring. Vulnerability Details CVEID:CVE-2024-22262 DESCRIPTION: VMware Tanzu...

CVE-2025-25166

creationtimestamp| type| source ---|---|--- 2025-02-07 10:18:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhleqmb4v22t 2025-02-07 12:08:29+00:00| seen| https://t.me/cvedetector/17470 2025-02-07 12:54:01+00:00| seen|...

CVE-2025-25153

creationtimestamp| type| source ---|---|--- 2025-02-07 10:17:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhleq2mka72q 2025-02-07 12:08:44+00:00| seen| https://t.me/cvedetector/17482 2025-02-07 12:53:57+00:00| seen|...

CVE-2025-25111

creationtimestamp| type| source ---|---|--- 2025-02-07 10:16:54+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhleoa3ni225 2025-02-07 12:00:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113962493470604940...