MGASA-2025-0155 Updated postgresql15 & postgresql13 packages fix security vulnerability

PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation. CVE-2025-4207...

BELL-CVE-2025-30722

Bulletin has no description...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: nri-memcached, bazelisk, spire-controller-manager-fips, wazero-fips, agentbeat, yace-fips, ingress-nginx-controller, velero-plugin-for-microsoft-azure, kiam, flux-kustomize-controller, cortex-fips, prometheus-statsd-exporter, actions-runner-controller-fips,...

MGASA-2025-0111 Updated kernel, kmod-virtualbox & kmod-xtables-addons packages fix security vulnerabilities

Upstream kernel version 6.6.83 fixes bugs and vulnerabilities. The kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new kernel. For information about the vulnerabilities see the links...

SUSE-SU-2025:0876-1 Security update for govulncheck-vulndb

This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20250313T170021 2025-03-13T17:00:21Z jscPED-11136 GO-2025-3427 GO-2025-3442 GO-2025-3443 GO-2025-3508 GO-2025-3509 GO-2025-3510 GO-2025-3511 GO-2025-3512 GO-2025-3514 GO-2025-3515 - Update to version...

CVE-2025-22870 vulnerabilities

Vulnerabilities for packages: nri-kafka, tailscale, spqr, kubernetes-dashboard-api, wave, cadvisor, sriov-network-device-plugin, bom, fuse-overlayfs-snapshotter, grafana-operator, openbao-k8s, crossplane-provider-aws-elasticache, yunikorn-k8shim, kubewatch, metallb, kubernetes-dns-node-cache,...

abgrouponline (>=1.0.0 <=1.0.4), abismal (>=0.0.6 <=0.0.7) +1625 more potentially affected by CVE-2025-1550 via keras (>=3.0.0 <=3.8.0)

keras PYPI version =3.0.0, =1.0.0, =0.0.6, =0.0.1, =0.0.1, =0.0.3, =0.3.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.3.0 - aegis-model =0.1.0 and more Source cves: CVE-2025-1550 Source advisory: OSV:GHSA-48G7-3X6R-XFHP...

CVE-2025-27152 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, opensearch-dashboards-fips, prism, kubeflow-pipelines, airflow, kubeflow-centraldashboard, tileserver-gl-fips, lerna, tileserver-gl, jitsucom-jitsu...

GHSA-P3FP-8748-VQFQ vulnerabilities

Vulnerabilities for packages: awx...

CVE-2025-26699 vulnerabilities

Vulnerabilities for packages: awx...

Linux Distros Unpatched Vulnerability : CVE-2024-50169

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: vsock: Update rxbytes on readskb Make sure virtiotransportincrxpkt and virtiotransportdecrxp...

Linux Distros Unpatched Vulnerability : CVE-2022-49402

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ftrace: Clean up hash directfunctions on register failures We see the following GPF when...

Linux Distros Unpatched Vulnerability : CVE-2023-41164

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uritoiri is subject to a potential DoS denial of service attack via...

Linux Distros Unpatched Vulnerability : CVE-2024-11111

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Autofill in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who convinced a user to engage in specific UI gesture...

CVE-2025-27220 vulnerabilities

Vulnerabilities for packages: elasticsearch, logstash, ruby, jruby...

Linux Distros Unpatched Vulnerability : CVE-2016-9189

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow before 3.3.2 allows context-dependent attackers to obtain sensitive information by using the crafted image file approach, related to an Integer Overflow...

Linux Distros Unpatched Vulnerability : CVE-2017-5446

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read when an HTTP/2 connection to a servers sends DATA frames with incorrect data content. This leads to a potentially exploitable crash. This...

Linux Distros Unpatched Vulnerability : CVE-2017-5464

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessibility tree, leading to memory corruption...

Linux Distros Unpatched Vulnerability : CVE-2013-1713

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 use an...

Linux Distros Unpatched Vulnerability : CVE-2017-5433

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free vulnerability in SMIL animation functions occurs when pointers to animation elements in an array are dropped from the animation controller whil...