Fedora: Security Advisory (FEDORA-2025-4388808bbf)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Moderate Photon OS Security Update - PHSA-2025-4.0-0916

Updates of 'cups' packages of Photon OS have been released...

Fedora 43 : kubernetes1.34 (2025-f32b1debd8)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-f32b1debd8 advisory. - Update to release v1.34.2 - Resolves: rhbz2398589, rhbz2398850, rhbz2399251, rhbz2399524 - Resolves: rhbz2407790, rhbz2408060, rhbz2408317,...

Fedora 44 : kubernetes1.32 (2025-8d7df81239)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-8d7df81239 advisory. Automatic update for kubernetes1.32-1.32.10-2.fc44. Changelog Wed Nov 12 2025 Bradley G Smith - 1.32.10-1 - Update to release v1.32.10 - Resolves:...

Photon OS 4.0: Lasso PHSA-2025-4.0-0903

An update of the lasso package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0903. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fedora 44 : cri-o1.32 (2025-c48cd0beee)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-c48cd0beee advisory. Automatic update for cri-o1.32-1.32.10-1.fc44. Changelog Tue Nov 11 2025 Bradley G Smith - 1.32.10-1 - Update to release v1.32.10 - Resolves:...

Important: runfinch-finch

Issue Overview: net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed withi...

Medium: fontforge

Issue Overview: FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8. CVE-2025-50949 Affected Packages: fontforge Issue Correction: Run dnf update fontforge --releasever 2023.9.20251110 or dnf update --advisory ALAS2023-2025-1262 --releasever 2023.9.20251110 to...

Photon OS 5.0: Binutils PHSA-2025-5.0-0670

An update of the binutils package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0670. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Imagemagick PHSA-2025-5.0-0664

An update of the ImageMagick package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0664. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

[SECURITY] Fedora 42 Update: python-pyqt6-6.9.0-5.fc42

PyQt6 is Python bindings for Qt6...

Fedora 43 : docker-buildx (2025-d81c797483)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-d81c797483 advisory. - Update to release v0.29.1 - Upstream fixes ---- - Update to release v0.29.0 - Resolves: rhbz2397747, rhbz2398425, rhbz2398679, rhbz2399082,...

Fedora 43 : cri-o1.32 (2025-661c377e53)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-661c377e53 advisory. - Update to release 1.32.9 - Resolves: rhbz2333357, rhbz2398407, rhbz2398662, rhbz2399064, rhbz2399338 - Upstream fix Tenable has extracted the...

EUVD-2025-19736

Malicious code in bioql PyPI...

EUVD-2023-1699

Malicious code in bioql PyPI...

Photon OS 4.0: Openvswitch PHSA-2025-4.0-0879

An update of the openvswitch package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0879. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Important: amazon-ssm-agent

Issue Overview: The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunction with a server or proxy which incorrectly interprets a bare LF in a chunk extension as part of the extension, this could permi...

Important: Red Hat Security Advisory: Red Hat Product OCP Tools 4.17 OpenShift Jenkins security update

An update for OpenShift Jenkins is now available for Red Hat Product OCP Tools 4.17. Red Hat Product Security has rated this update as having a security impact of important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

[SECURITY] Fedora 42 Update: gh-2.79.0-1.fc42

A command-line interface to GitHub for use in your terminal or your scripts. gh is a tool designed to enhance your workflow when working with GitHub. It provides a seamless way to interact with GitHub repositories and perform vari ous actions right from the command line, eliminating the need to...

[SECURITY] Fedora 41 Update: gh-2.79.0-1.fc41

A command-line interface to GitHub for use in your terminal or your scripts. gh is a tool designed to enhance your workflow when working with GitHub. It provides a seamless way to interact with GitHub repositories and perform vari ous actions right from the command line, eliminating the need to...