tools-python

Python library to parse, validate and create SPDX documents CI status Linux, macOS and Windows: Breaking changes v0.7 - v0.8 Please be aware that the upcoming 0.8 release has undergone a significant refactoring in preparation for the upcoming SPDX v3.0 release, leading to breaking changes in the...

bomber

bomber is an application that scans SBOMs for security vulnerabilities. Overview So you've asked a vendor for an Software Bill of Materials SBOM for one of their closed source products, and they provided one to you in a JSON file... now what? The first thing you're going to want to do is see if a...

bom-view

BOM View A simple, static web application for displaying software dependencies from Software Bill of Materials SBOM files. Being a static site, it can be easily hosted on any static web hosting service, such as GitLab Pages, GitHub Pages, or Netlify. Features SBOM Viewer : Displays components fro...

openSUSE 16 Security Update : syft (openSUSE-SU-2026:20928-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20928-1 advisory. Changes in syft: - Update to version 1.45.0: Added Features - Add support for ZapAddOns as jar files 4654 4932 @douglasclarke - MySQL binary classifier...

OPENSUSE-SU-2026:20928-1 Security update for syft

This update for syft fixes the following issues: Changes in syft: - Update to version 1.45.0: Added Features - Add support for ZapAddOns as jar files 4654 4932 @douglasclarke - MySQL binary classifier should distinguish between MySQL Cluster ndb and MySQL 3297 4907 @witchcraze - Catalog...

GHSA-72HV-8253-57QQ vulnerabilities

Vulnerabilities for packages: celeborn, wavefront-proxy, ruby3.4-jrjackson, neo4j, dependency-track, apache-nifi-registry, scala, infinispan, trino, gradle-stage0, strimzi-kafka-operator, ruby3.3-jrjackson, logstash, nextflow, solr, ruby3.2-jrjackson, apache-pulsar, druid, spark,...

GHSA-72HV-8253-57QQ vulnerabilities

Vulnerabilities for packages: jenkins, apache-tika, opensearch, flyway, cassandra-reaper, nacos, jenkins-plugin-manager, apache-hop-fips, kafka, s3proxy-fips, celeborn, geoserver, commercial-elasticsearch, opensearch-fips, scala, gradle, zookeeper, confluent-kafka-jre-bcfips, apache-tika-fips,...

Ubuntu: Security Advisory (USN-7654-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-48734 vulnerabilities

Vulnerabilities for packages: jenkins, apache-activemq-artemis, opensearch, trino, apache-nifi, apicurio-registry, hadoop-client-modules, sonarqube, ghidra, cassandra-reaper, jenkins-plugin-manager, kafka, celeborn, confluent-common-docker, hadoop-fips, confluent-kafka-jre-bcfips, druid, solr,...

php:8.2 security update

php 8.2.28-1 - rebase to 8.2.28 8.2.25-1 - rebase to 8.2.25 RHEL-65837 8.2.13-1 - rebase to 8.2.13 RHEL-14699 - add %phpize and %phpconfig macros - move httpd/nginx wants directives to config files in /etc - php-fpm.conf: move include directive after global section following upstream example,...

openSUSE Security Advisory (SUSE-SU-2024:2135-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2024:2802-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 37 : woff (2022-c30d362ce5)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-c30d362ce5 advisory. Fix a possible double free in woffEncode. - Update License to SPDX - improved summary and description - Add hand-written man pages - Install HTML format...

Fedora 41 : krb5 (2024-bdc305fe55)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-bdc305fe55 advisory. Automatic update for krb5-1.21.3-1.fc41. Changelog Tue Jul 9 2024 Julien Rische - 1.21.3-1 - New upstream version 1.21.3 - CVE-2024-26458: Memory le...

Fedora 37 : protobuf (2022-25f35ed634)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-25f35ed634 advisory. Selected notes from packaging changes and improvements: 3.19.6 fixes CVE-2022-3171 3.19.5 fixes CVE-2022-1941 License updated to SPDX Unnecessary...

libndp security update

1.8-6 - Validate route information option length 1.8-5 - Convert the license tag to SPDX format Related: RHELMISC-1363...

SUSE: Security Advisory (SUSE-SU-2023:4127-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for rust-askama (FEDORA-2023-e9243281cb)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 36 : woff (2022-706c76c4f0)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-706c76c4f0 advisory. Fix a possible double free in woffEncode. - Update License to SPDX - improved summary and description - Add hand-written man pages - Install HTML format...

SUSE: Security Advisory (SUSE-SU-2022:3783-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...