Security and bug fixes for NetworkManager

An update is available for NetworkManager. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list NetworkManager is a system network service that manages network device...

Citrix Virtual Apps and Desktops - Citrix Studio is attempting to connect to Google Analytics

Citrix Studio tries to upload data to Google Analytics POSThttp://www.google-analytics.com/collect HTTP/1.1. Third-Party Security tools detect this traffic and may show the alert. Example from Vector Security Network Cybersecurity Tool: Citrix Studio is attempting to connect to Google Analytics...

UBUNTU-CVE-2023-52927

In the Linux kernel, the following vulnerability has been resolved: netfilter: allow exp not to be removed in nfctfindexpectation Currently nfconntrackin calling nfctfindexpectation will remove the exp from the hash table. However, in some scenario, we expect the exp not to be removed when the...

[SECURITY] Fedora 41 Update: trafficserver-9.2.9-1.fc41

Traffic Server is a high-performance building block for cloud services. It's more than just a caching proxy server; it also has support for plugins to build large scale web applications. Key features: Caching - Improve your response time, while reducing server load and bandwidth needs by caching...

[SECURITY] Fedora 40 Update: trafficserver-9.2.9-1.fc40

Traffic Server is a high-performance building block for cloud services. It's more than just a caching proxy server; it also has support for plugins to build large scale web applications. Key features: Caching - Improve your response time, while reducing server load and bandwidth needs by caching...

Fedora: Security Advisory (FEDORA-2025-286e6fc13a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 41 : trafficserver (2025-c634be56bc)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-c634be56bc advisory. Changes with Apache Traffic Server 9.2.9 12071 - Fix chunked pipelined requests 12075 - Fix send 100 Continue optimization for GET 12077 - Fix...

net/mlx5e: Skip restore TC rules for vport rep without loaded flag

...

Apache Traffic Server Access Control Error Vulnerability

Apache Traffic Server ATS is the United States Apache Apache Foundation's set of scalable HTTP proxy and caching server. A security vulnerability exists in Apache Traffic Server versions 10.0.0 through 10.0.3, and no detailed vulnerability details are provided at this time...

HCL AppScan Traffic Recorder 路径遍历漏洞

HCL AppScan Traffic Recorder is a traffic recorder from HCL India. HCL AppScan Traffic Recorder suffers from a path traversal vulnerability that stems from a failure to adequately neutralize special characters in filenames, which could result in the complete destruction or takeover of the...

Siemens SCALANCE X-200RNA Switch Devices Improper Input Validation (CVE-2015-0207)

The dtls1listen function in d1lib.c in OpenSSL 1.0.2 before 1.0.2a does not properly isolate the state information of independent data streams, which allows remote attackers to cause a denial of service application crash via crafted DTLS traffic, as demonstrated by DTLS 1.0 traffic to a DTLS 1.2...

CVE-2025-27253

A CWE-15 "External Control of System or Configuration Setting" in GE Vernova UR IED family devices from version 7.0 up to 8.60 allows an attacker to provide input that establishes a TCP connection through a port forwarding. The lack of the IP address and port validation may allow the attacker to...

CVE-2025-20141

A vulnerability in the handling of specific packets that are punted from a line card to a route processor in Cisco IOS XR Software Release 7.9.2 could allow an unauthenticated, adjacent attacker to cause control plane traffic to stop working on multiple Cisco IOS XR platforms. This vulnerability ...

CVE-2025-20141 Cisco IOS XR Software Release 7.9.2 Denial of Service Vulnerabillity

A vulnerability in the handling of specific packets that are punted from a line card to a route processor in Cisco IOS XR Software Release 7.9.2 could allow an unauthenticated, adjacent attacker to cause control plane traffic to stop working on multiple Cisco IOS XR platforms. This vulnerability ...

Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-7344-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7344-1 advisory. Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use...

CVE-2025-27253

CVE-2025-27253 affects GE Vernova UR IED family devices (versions 7.0–8.60). The vulnerability is CWE-15: External Control of System or Configuration Setting, caused by improper input validation that allows an attacker to provide input which establishes a TCP connection via port forwarding. Lack ...

CVE-2025-27253

A CWE-15 "External Control of System or Configuration Setting" in GE Vernova UR IED family devices from version 7.0 up to 8.60 allows an attacker to provide input that establishes a TCP connection through a port forwarding. The lack of the IP address and port validation may allow the attacker to...

The vulnerability of the TSHttpTxnIntercept() function in the Apache Traffic Server allows a hacker to gain unauthorized access to protected information.

The vulnerability of the TSHttpTxnIntercept function in the Apache Traffic Server web server is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Apache Traffic Server web server arises from discrepancies in functionality compared to the specifications. This allows attackers to compromise the accessibility of the protected information.

The vulnerability of the Apache Traffic Server web server is related to discrepancies in functionality according to the specification when processing the Expect header. Exploiting this vulnerability allows a remote attacker to compromise the accessibility of protected information...

The vulnerability of the Apache Traffic Server web server, related to insufficient input validation, allows attackers to send hidden HTTP requests (HTTP Request Smuggling attack).

The vulnerability of the Apache Traffic Server web server is related to insufficient checks on input. Exploiting this vulnerability allows a malicious actor to send hidden HTTP requests remotely HTTP Request Smuggling attack...