Oracle Linux 10 : kernel (ELSA-2025-9896)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-9896 advisory. 6.12.0-55.19.1.0.10.OL10 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Add new Oracle Linux Driver Signing key 1 certificate...

Ubuntu: Security Advisory (USN-7609-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 42 : giflib (2025-928071dafb)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-928071dafb advisory. Backport proposed fix for CVE-2025-31344 from OpenMandriva. ---- Install gifgetarg.h header. Tenable has extracted the preceding description block...

Photon OS 5.0: Spdlog PHSA-2025-5.0-0547

An update of the spdlog package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0547. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fedora 42 : perl / perl-Devel-Cover / perl-PAR-Packer (2025-26c0346398)

The remote Fedora 42 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-26c0346398 advisory. Fix CVE-2024-56406 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Oracle Linux 8 : thunderbird (ELSA-2025-10246)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-10246 advisory. 128.12.0-1.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 128.12.0 - Add OpenELA debranding 128.12.0-1 - Update to 128.12.0 build1 Tenabl...

Fedora 42 : iputils (2025-dd7e746aac)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-dd7e746aac advisory. Fix for CVE-2025-47268 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

MGASA-2025-0200 Updated libarchive packages fix security vulnerabilities

Double free at archivereadformatrarseekdata in archivereadsupportformatrar.c. CVE-2025-5914 Heap buffer over read in copyfromlzsswindow at archivereadsupportformatrar.c. CVE-2025-5915 Integer overflow while reading warc files at archivereadsupportformatwarc.c. CVE-2025-5916 Off by one error in...

CGA-VP5Q-G93R-42XP

Bulletin has no description...

Cisco BroadWorks CommPilot Application Software Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the interface. This vulnerability is due to insufficient validation of user-supplied...

Cisco Spaces Connector Privilege Escalation Vulnerability

A vulnerability in Cisco Spaces Connector could allow an authenticated, local attacker to elevate privileges and execute arbitrary commands on the underlying operating system as root. This vulnerability is due to insufficient restrictions during the execution of specific CLI commands. An attacker...

Cisco Unified Communications Manager Static SSH Credentials Vulnerability

A vulnerability in Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an unauthenticated, remote attacker to log in to an affected device using the root account, which has default, static credentials that...

GHSA-F946-J5J2-4W5M

creationtimestamp| type| source ---|---|--- 2025-07-02 14:36:58+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lsygsqtgiy2f 2025-07-03 00:05:08+00:00| seen| https://bsky.app/profile/nixpkgs-prs-bot.bsky.social/post/3lszgkpezi726...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.53 security and extras update

Red Hat OpenShift Container Platform release 4.14.53 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a security impact of...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.18.19 bug fix and security update

Red Hat OpenShift Container Platform release 4.18.19 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.16.43 bug fix and security update

Red Hat OpenShift Container Platform release 4.16.43 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...

CGA-H9JP-5C73-PXM8

Bulletin has no description...

Photon OS 4.0: Apache PHSA-2025-4.0-0823

An update of the apache package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0823. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Krb5 PHSA-2025-5.0-0545

An update of the krb5 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0545. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Oracle Linux 9 : firefox (ELSA-2025-10072)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-10072 advisory. 128.12.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding R...