SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2025:03052-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03052-1 advisory. - Intel CPU Microcode was updated to the 20250812 release bsc1248438 - CVE-2025-20109: Improper Isolation or Compartmentalization in the strea...

Fedora 43 : python3.13 (2025-6407a7ee7e)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-6407a7ee7e advisory. This is the eleventh maintenance release of Python 3.13 Tenable has extracted the preceding description block directly from the Fedora security...

RHEL 8 : glib2 (RHSA-2025:14988)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:14988 advisory. GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in...

[SECURITY] [DSA 6080-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6080-1 [email protected] https://www.debian.org/security/ Andres Salomon December 12, 2025 https://www.debian.org/security/faq -...

CVE-2025-13633 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-9WWW-PQCC-JM28 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-38PP-6GCP-RQVM vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, hubble-ui...

GHSA-6JXR-VC7P-9HQV vulnerabilities

Vulnerabilities for packages: chromium...

Mozilla Thunderbird ESR Security Update (mfsa_2025-96) - Windows

Mozilla Thunderbird ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Security Updates for Microsoft Excel Products C2R (December 2025)

The Microsoft Excel Products are missing a security update. It is, therefore, affected by the following vulnerabilities: - Multiple remote code execution vulnerabilities that attackers can exploit to bypass authentication and execute unauthorized arbitrary commands. CVE-2025-62553, CVE-2025-62556...

GitLab Enterprise Edition（EE）和GitLab Community Edition（CE） 安全漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system...

Huawei EulerOS: Security Advisory for aide (EulerOS-SA-2025-2513)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian dla-4401 : firefox-esr - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4401 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4401-1 [email protected]...

Mozilla Firefox ESR Security Update (mfsa_2025-94) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Security update for python310

This update for python310 fixes the following issues: Update to 3.10.19: CVE-2025-6075: Fixed simple quadratic complexity vulnerabilities of os.path.expandvars. bsc1252974 CVE-2025-8291: Check the validity the ZIP64 End of Central Directory EOCD. bsc1251305 Patch Instructions: To install this SUS...

Security Bulletin: Multiple security vulnerabilities have been identified in IBM Db2 shipped with IBM Guardium Key Lifecycle Manager

Summary IBM Db2 is shipped as a component of IBM Guardium Key Lifecycle Manager. Information about multiple security vulnerabilities affecting IBM Db2 has been published in security bulletins. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected...

Fedora 44 : containernetworking-plugins (2025-c67591d0a2)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-c67591d0a2 advisory. Automatic update for containernetworking-plugins-1.9.0-1.fc44. Changelog Tue Dec 9 2025 Bradley G Smith - 1.9.0-1 - Update to release v1.9.0 -...

Fedora 43 : imhex / lunasvg (2025-58c0baba42)

The remote Fedora 43 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2025-58c0baba42 advisory. - Unbundle plutovg from lunasvg, this avoids shipping a duplicate library with conflicting files. - Update lunasvg to consume the plutovg version...

EUVD-2025-201854

SAPUI5 and OpenUI5 packages use outdated 3rd party libraries with known security vulnerabilities. When markdown-it encounters special malformed input, it fails to terminate properly, resulting in an infinite loop. This Denial of Service via infinite loop causes high CPU usage and system...

Important: Red Hat Security Advisory: Red Hat JBoss Web Server 5.8.6 release and security update

An update is now available for Red Hat JBoss Web Server 5.8 on Red Hat Enterprise Linux versions 7, 8, and 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...