RHSA-2025:9187 Red Hat Security Advisory: ipa security update

Bulletin has no description...

RHSA-2025:9186 Red Hat Security Advisory: ipa security update

Bulletin has no description...

RHSA-2025:9177 Red Hat Security Advisory: git-lfs security update

Bulletin has no description...

SUSE-SU-2025:01990-1 Security update for golang-github-prometheus-prometheus

This update for golang-github-prometheus-prometheus fixes the following issues: - Security issues fixed: CVE-2023-45288: Require Go = 1.23 for building bsc1236516 CVE-2025-22870: Bump golang.org/x/net to version 0.39.0 bsc1238686 - Version was updated to 2.53.4 with the following bug fixes:...

PT-2025-26071 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.17.0-rc5 Description: A data race issue in the Linux kernel's dmaengine sf-pdma component allows multiple threads to access and modify a DMA channel's descriptor simultaneously, leading to a NULL pointer...

PT-2025-25922 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been identified in the Linux kernel, specifically in the btrfs get dev args from path function. This function can fail if the provided path is invalid, leading ...

PT-2025-25865 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.19.0-rc8 Description: A use-after-free bug has been identified in the Linux kernel, specifically in the binder component. This issue arises due to a race condition where a transaction of type BINDER TYPE WEAK...

PT-2025-26168 · Ibm · Ibm Sterling File Gateway +1

Name of the Vulnerable Software and Affected Versions: IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.0.0.0 through 6.1.2.6 IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.2.0.0 through 6.2.0.4 Description: The issue allows an authenticated user to embed...

PT-2025-26187 · Cryptpad · Cryptpad

Name of the Vulnerable Software and Affected Versions: CryptPad versions prior to 2025.3.0 Description: The issue concerns the "Link Bouncer" functionality in CryptPad, a collaboration suite, which attempts to filter javascript URIs to prevent Cross-Site Scripting XSS. However, this filtering can...

CVE-2025-49824 conda-smithy Insecure Encryption Vulnerable to Oracle Padding Attack

conda-smithy is a tool for combining a conda recipe with configurations to build using freely hosted CI services into a single repository. Prior to version 3.47.1, the travisencryptbinstartoken implementation in the conda-smithy package has been identified as vulnerable to an Oracle Padding Attac...

CGA-C3FJ-QR55-VH7P

Bulletin has no description...

RHSA-2025:9166 Red Hat Security Advisory: apache-commons-beanutils security update

Bulletin has no description...

RHSA-2025:9151 Red Hat Security Advisory: gvisor-tap-vsock security update

Bulletin has no description...

RHSA-2025:9155 Red Hat Security Advisory: firefox security update

Bulletin has no description...

RHSA-2025:9150 Red Hat Security Advisory: gvisor-tap-vsock security update

Bulletin has no description...

RHSA-2025:9146 Red Hat Security Advisory: podman security update

Bulletin has no description...

RHSA-2025:9122 Red Hat Security Advisory: libvpx security update

Bulletin has no description...

RHSA-2025:9114 Red Hat Security Advisory: apache-commons-beanutils security update

Bulletin has no description...

PT-2025-25718 · Mycred · Mycred

Name of the Vulnerable Software and Affected Versions: myCred versions 2.9.4.2 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels. Recommendations: For myCred versions 2.9.4.2 a...

PT-2025-25665 · Unknown · Snstheme Dsk

Name of the Vulnerable Software and Affected Versions: snstheme DSK versions n/a through 2.2 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability, allowing PHP Local File Inclusio...