Oracle Linux 9 : kernel (ELSA-2025-6966)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-6966 advisory. - net: stmmac: dwmac-tegra: Read iommu stream id from device tree Izabela Bakollari RHEL-75649 CVE-2025-21663 - net: stmmac: Fix zero-division error wh...

FreeBSD : screen -- multiple vulnerabilities (4abd86c1-366d-11f0-9c0c-000c29ffbb6c)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 4abd86c1-366d-11f0-9c0c-000c29ffbb6c advisory. The screen project reports: Multiple security issues in screen. Tenable has extracted the...

OPENSUSE-SU-2025:15144-1 govulncheck-vulndb-0.0.20250520T172319-1.1 on GA media

These are all security issues fixed in the govulncheck-vulndb-0.0.20250520T172319-1.1 package on the GA media of openSUSE Tumbleweed...

Slackware Linux 15.0 / current mozilla-thunderbird Vulnerability (SSA:2025-140-02)

The version of mozilla-thunderbird installed on the remote host is prior to 128.10.2esr. It is, therefore, affected by a vulnerability as referenced in the SSA:2025-140-02 advisory. New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Tenable has...

OPENSUSE-SU-2025:15146-1 kind-0.29.0-1.1 on GA media

These are all security issues fixed in the kind-0.29.0-1.1 package on the GA media of openSUSE Tumbleweed...

chromedriver-136.0.7103.113-1.1 on GA media (moderate)

chromedriver-136.0.7103.113-1.1 on GA media Announcement ID: openSUSE-SU-2025:15143-1 Rating: moderate Cross-References: CVE-2025-4609 CVE-2025-4664 Affected Products: openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. Description: These are all security issues fixe...

Eclipse JGit XML External Entity (XXE) Vulnerability

In Eclipse JGit versions 7.2.0.202503040940-r and older, the ManifestParser class used by the repo command and the AmazonS3 class used to implement the experimental amazons3 git transport protocol allowing to store git pack files in an Amazon S3 bucket, are vulnerable to XML External Entity XXE...

dante-1.4.4-1.1 on GA media (moderate)

dante-1.4.4-1.1 on GA media Announcement ID: openSUSE-SU-2025:15132-1 Rating: moderate Cross-References: CVE-2024-54662 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the dante-1.4.4-1.1...

Ubuntu: Security Advisory (USN-7519-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2025:15143-1 chromedriver-136.0.7103.113-1.1 on GA media

These are all security issues fixed in the chromedriver-136.0.7103.113-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-37947

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds stream writes by validating pos ksmbdvfsstreamwrite did not validate whether the write offset pos was within the bounds of the existing stream data length vlen. If pos was greater than or equal to vle...

CVE-2025-37934

In the Linux kernel, the following vulnerability has been resolved: ASoC: simple-card-utils: Fix pointer check in graphutilparselinkdirection Actually check if the passed pointers are valid, before writing to them. This also fixes a USBAN warning: UBSAN: invalid-load in...

CVE-2025-37933

In the Linux kernel, the following vulnerability has been resolved: octeonep: Fix host hang issue during device reboot When the host loses heartbeat messages from the device, the driver calls the device-specific ndostop function, which frees the resources. If the driver is unloaded in this...

SUSE-SU-2025:01593-1 Security update for the Linux Kernel (Live Patch 60 for SLE 12 SP5)

This update for the Linux Kernel 4.12.14-122228 fixes several issues. The following security issues were fixed: - CVE-2024-53156: wifi: ath9k: add range check for connrspepid in htcconnectservice bsc1234847. - CVE-2024-50115: KVM: nSVM: Ignore nCR34:0 when loading PDPTEs from memory bsc1233019...

Ubuntu 24.04 LTS : Linux kernel (Azure, N-Series) vulnerabilities (USN-7522-1)

"The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7522-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws i...

OPENSUSE-SU-2025:15133-1 firefox-esr-128.10.1-1.1 on GA media

These are all security issues fixed in the firefox-esr-128.10.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15135-1 govulncheck-vulndb-0.0.20250515T200012-1.1 on GA media

These are all security issues fixed in the govulncheck-vulndb-0.0.20250515T200012-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15140-1 postgresql16-16.9-1.1 on GA media

These are all security issues fixed in the postgresql16-16.9-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15138-1 postgresql14-14.18-1.1 on GA media

These are all security issues fixed in the postgresql14-14.18-1.1 package on the GA media of openSUSE Tumbleweed...

Ubuntu 24.04 LTS : Linux kernel (Raspberry Pi Real-time) vulnerabilities (USN-7523-1)

"The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7523-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws i...