openSUSE 16 Security Update : chromium (openSUSE-SU-2025-20076-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025-20076-1 advisory. Changes in chromium: Chromium 142.0.7444.175 boo1253698: CVE-2025-13223: Type Confusion in V8 CVE-2025-13224: Type Confusion in V8 Tenable has...

curl-8.17.0-1.1 on GA media (moderate)

curl-8.17.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15757-1 Rating: moderate Cross-References: CVE-2025-10966 CVE-2025-11563 CVSS scores: CVE-2025-10966 SUSE : 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N CVE-2025-10966 SUSE : 7.6...

Security update for chromium (important)

openSUSE security update: security update for chromium ------------------------------------------------------------- Announcement ID: openSUSE-SU-2025-20076-1 Rating: important References: bsc1253698 Cross-References: CVE-2025-13223 CVE-2025-13224 Affected Products: openSUSE Leap 16.0...

Mattermost Server 10.5.x < 10.5.12 / 10.11.x 10.11.4 / 10.12.x < 10.12.1 / 11.0.0 Multiple Vulnerabilities (MMSA-2025-00541, MMSA-2025-00492)

The version of Mattermost Server installed on the remote host is affected by multiple vulnerabilities as referenced in the MMSA-2025-00541, MMSA-2025-00492 advisory. - Mattermost versions 10.11.x = 10.11.3, 10.5.x = 10.5.11, 10.12.x = 10.12.0 fail to sanitize user data which allows system...

sbctl-0.18-2.1 on GA media (moderate)

sbctl-0.18-2.1 on GA media Announcement ID: openSUSE-SU-2025:15743-1 Rating: moderate Cross-References: CVE-2025-47911 CVE-2025-58190 CVSS scores: CVE-2025-47911 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2025-47911 SUSE : 6.9...

Mozilla Firefox ESR < 52.2

The version of Firefox ESR installed on the remote Windows host is prior to 52.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2017-16 advisory. - A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads...

Important: Red Hat Security Advisory: libtiff security update

An update for libtiff is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Moderate: vim security update

Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim path traversal CVE-2025-53906 vim: Vim path traversial CVE-2025-53905 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer...

SUSE SLES15: java-1_8_0-openjdk / java-1_8_0-openjdk-accessibility / etc (SUSE-SU-2025:4039-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4039-1 advisory. Update to version jdk8u472 icedtea-3.37.0: - CVE-2025-53057: Fixed certificate handling leading to unauthorized...

java-21-openj9-21.0.9.0-1.1 on GA media (moderate)

java-21-openj9-21.0.9.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15693-1 Rating: moderate Cross-References: CVE-2025-53057 CVE-2025-61748 CVSS scores: CVE-2025-53057 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2025-53057 SUSE : 8.2...

Impact Of CVE-2025-55752 And CVE-2025-55754 On EPMM, Sentry, Connector

Last Modified Date Oct 31, 2025 3:15:00 PM...

UBUNTU-CVE-2025-58148

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Some Viridian hypercalls can specify a mask of vCPU IDs as an input, in one of three formats. Xen has boundary checking bugs with all three formats, which can cause...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2025-24893link is external XWiki Platform Eval Injection Vulnerability CVE-2025-41244link is external Broadcom VMware Aria Operations and VMware Tools Privilege...

Fedora: Security Advisory (FEDORA-2025-9f8cbb5e03)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-c23727e694)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 4348-1] python-pip security update

Debian LTS Advisory DLA-4348-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert October 26, 2025 https://wiki.debian.org/LTS Package : python-pip Version : 20.3.4-4+deb11u2 CVE ID : CVE-2023-5752 CVE-2025-8869 Debian Bug : 1116336 Multiple vulnerabilities have been...

EulerOS 2.0 SP13 : grub2 (EulerOS-SA-2025-2261)

According to the versions of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU GRUB aka GRUB2 through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem.CVE-2024-56737 GNU GRUB a...

Debian dla-4341 : gegl - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4341 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4341-1 [email protected]...

kernel security update

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

libQt6Svg6-6.10.0-1.1 on GA media (moderate)

libQt6Svg6-6.10.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15630-1 Rating: moderate Cross-References: CVE-2025-10728 CVE-2025-10729 CVSS scores: CVE-2025-10728 SUSE : 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H CVE-2025-10729 SUSE : 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H...