Vulnerabilities fixed in Cisco Secure Firewall ASA and FTD

Cisco has fixed vulnerabilities in Cisco Secure Firewall ASA and FTD Software. The vulnerability with reference CVE-2025-20333, is located in how the software validates user input in HTTPS requests. An attacker with valid VPN login credentials can exploit this vulnerability by sending specially...

openSUSE Security Advisory (SUSE-SU-2025:03271-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2025:03271-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CLSA-2025-1757944976 php: Fix of 3 CVEs

CVE-2017-9224: fix out-of-bounds read of a stack in matchat function - CVE-2017-9226: fix out-of-bounds write or read of a heap in nextstateval function - CVE-2017-9227: fix out-of-bounds read of a stack in mbcenclen function...

cargo-audit-0.21.2~git0.18e58c2-2.1 on GA media (moderate)

cargo-audit-0.21.2git0.18e58c2-2.1 on GA media Announcement ID: openSUSE-SU-2025:15550-1 Rating: moderate Cross-References: CVE-2024-12224 CVE-2025-4574 CVE-2025-58160 CVSS scores: CVE-2024-12224 SUSE : 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N CVE-2024-12224 SUSE : 2.1...

cargo-c-0.10.3~git0.ee7d7ef-4.1 on GA media (moderate)

cargo-c-0.10.3git0.ee7d7ef-4.1 on GA media Announcement ID: openSUSE-SU-2025:15551-1 Rating: moderate Cross-References: CVE-2024-12224 CVE-2025-4574 CVE-2025-58160 CVSS scores: CVE-2024-12224 SUSE : 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N CVE-2024-12224 SUSE : 2.1...

orthanc-gdcm-1.7-1.1 on GA media (moderate)

orthanc-gdcm-1.7-1.1 on GA media Announcement ID: openSUSE-SU-2025:15546-1 Rating: moderate Cross-References: CVE-2024-22373 CVE-2024-22391 CVE-2024-25569 CVSS scores: CVE-2024-22373 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2024-22391 SUSE : 7.7...

EulerOS 2.0 SP12 : binutils (EulerOS-SA-2025-2031)

According to the versions of the binutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in GNU Binutils up to 2.44. It has been rated as critical. Affected by this issue is the function elfgcsweep of the fil...

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2025-38352link is external Linux Kernel Time-of-Check Time-of-Use TOCTOU Race Condition Vulnerability CVE-2025-48543link is external Android Runtime Unspecifi...

SUSE: Security Advisory (SUSE-SU-2025:03020-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CLSA-2025-1756483990 php: Fix of 3 CVEs

CVE-2025-1217: http stream wrapper: fix handling folded headers - CVE-2025-1734: http stream wrapper: fix handling headers with invalid name and no colon - CVE-2025-1861: fix http redirect location truncation...

libtiff-devel-32bit-4.7.0-8.1 on GA media (moderate)

libtiff-devel-32bit-4.7.0-8.1 on GA media Announcement ID: openSUSE-SU-2025:15487-1 Rating: moderate Cross-References: CVE-2024-13978 CVE-2025-8534 CVE-2025-9165 CVSS scores: CVE-2024-13978 SUSE : 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2024-13978 SUSE : 5.7...

TencentOS Server 4: mysql (TSSA-2025:0613)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0613 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

TencentOS Server 4: libheif (TSSA-2025:0631)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0631 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Security update for postgresql13

This update for postgresql13 fixes the following issues: Upgrade to 13.22: CVE-2025-8713: optimizer statistics can expose sampled data within a view, partition, or child table bsc1248120. CVE-2025-8714: untrusted data inclusion in pgdump lets superuser of origin server execute arbitrary code in...

postgresql16-16.10-1.1 on GA media (moderate)

postgresql16-16.10-1.1 on GA media Announcement ID: openSUSE-SU-2025:15454-1 Rating: moderate Cross-References: CVE-2025-8713 CVE-2025-8714 CVE-2025-8715 CVSS scores: CVE-2025-8713 SUSE : 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2025-8713 SUSE : 5.3...

postgresql13-13.22-1.1 on GA media (moderate)

postgresql13-13.22-1.1 on GA media Announcement ID: openSUSE-SU-2025:15451-1 Rating: moderate Cross-References: CVE-2025-8713 CVE-2025-8714 CVE-2025-8715 CVSS scores: CVE-2025-8713 SUSE : 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2025-8713 SUSE : 5.3...

jasper-4.2.8-2.1 on GA media (moderate)

jasper-4.2.8-2.1 on GA media Announcement ID: openSUSE-SU-2025:15448-1 Rating: moderate Cross-References: CVE-2025-8835 CVE-2025-8836 CVE-2025-8837 CVSS scores: CVE-2025-8835 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2025-8835 SUSE : 6.8...

tomcat-9.0.107-1.1 on GA media (moderate)

tomcat-9.0.107-1.1 on GA media Announcement ID: openSUSE-SU-2025:15441-1 Rating: moderate Cross-References: CVE-2025-52434 CVE-2025-52520 CVE-2025-53506 CVSS scores: CVE-2025-52434 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-52434 SUSE : 8.2...

[SECURITY] [DLA 4273-1] postgresql-13 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4273-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb August 14, 2025 https://wiki.debian.org/LTS -...