nodejs:18 security update

nodejs 1:18.20.6-1 - Update to version 18.20.6 Resolves: RHEL-76801 Fixes: CVE-2025-23085 1:18.20.4-1 - Update to 18.20.4 Fixes: CVE-2024-22020 CVE-2024-28863 nodejs-nodemon nodejs-packaging...

Security Updates for Microsoft Word Products C2R (February 2025)

The Microsoft Word Products are missing a security update. It is, therefore, affected by multiple remote code execution vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable,...

RLSA-2025:0595 Important: redis:6 security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

CVE-2025-26519

creationtimestamp| type| source ---|---|--- 2025-02-13 17:44:02+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3li3ahbyuoi26 2025-02-13 17:54:51+00:00| seen| https://infosec.exchange/users/andersonc0d3/statuses/113997859449174513 2025-02-13 17:55:12+00:00| seen|...

CGA-JV4F-6729-5P92

Bulletin has no description...

CGA-77FH-PX8C-24H3

Bulletin has no description...

CGA-FPV8-W263-26V5

Bulletin has no description...

CVE-2025-1094

Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral, PQescapeIdentifier, PQescapeString, and PQescapeStringConn allows a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL injection requires the application to use the...

CVE-2023-1073

creationtimestamp| type| source ---|---|--- 2025-02-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-09...

Vulnerability fixed in Veeam

Veeam has fixed a vulnerability in the Veeam Updater component. The vulnerability is in how the Veeam Updater component validates TLS certificates. Insufficient validation can allow Man-in-the-Middle attackers to execute arbitrary code on affected servers. This can lead to unauthorized access and...

CVE-2024-13639

creationtimestamp| type| source ---|---|--- 2025-02-13 08:30:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113995641624064014 2025-02-13 09:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li2e2anebm2g 2025-02-13 10:09:02+00:00| seen|...

CVE-2024-13345

creationtimestamp| type| source ---|---|--- 2025-02-13 07:01:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113995292068646836 2025-02-13 07:15:20+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li25d3f5fy2a 2025-02-13 10:09:24+00:00| seen|...

[SECURITY] Fedora 40 Update: python3.11-3.11.11-5.fc40

Python 3.11 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.11 package provides the "python3.11" executable:...

CVE-2024-7102

creationtimestamp| type| source ---|---|--- 2025-02-13 01:16:05+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhzjaojbha2x 2025-02-13 02:48:41+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113994296216432932 2025-02-13 04:25:08+00:00| seen|...

container-tools:ol8 security update

aardvark-dns buildah 2:1.33.12-1 - update to the latest content of https://github.com/containers/buildah/tree/release-1.33 https://github.com/containers/buildah/commit/58af1cd - Resolves: RHEL-67612 cockpit-podman conmon containernetworking-plugins containers-common 1-82.0.1 - Updated removed...

SUSE: Security Advisory (SUSE-SU-2024:3251-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:3309-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2024:3585-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2025:14805-1 postgresql13-13.19-1.1 on GA media

These are all security issues fixed in the postgresql13-13.19-1.1 package on the GA media of openSUSE Tumbleweed...

SANnav ROCKY LINUX Upgrade for RLSA-2024:5530, RLSA-2024:5101, RLSA-2024:4583, RLSA-2024:3501, RLSA-2024:3513, RLSA-2024:3619, RLSA-2024:4349, RLSA-2024:4078, RLSA-2024:2758, RLSA-2024:2758

Brocade SANnav OVA versions 2.3.1b and 2.4.0 along with Brocade sannavova8xos122024 SANnav OVA patch from December 2024 utilize an upgraded Rocky Linux Kernel. The upgrade has provided Security updates for numerous security vulnerabilities. Rocky Linux Security Update for python-setuptools...