GHSA-XHGV-99MJ-8M2X Tryton sao allows XSS via an HTML attachment

Tryton sao aka tryton-sao before 7.6.9 allows XSS via an HTML attachment. This is fixed in 7.6.9, 7.4.19, 7.0.38, and 6.0.67...

CLSA-2025-1764321653 bind: Fix of CVE-2025-40778

CVE-2025-40778: fix issue with BIND being too lenient when accepting records from answers to prevent the injection of forged data into the cache...

Ubuntu: Security Advisory (USN-7852-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for python312

This update for python312 fixes the following issues: Update to 3.12.12: CVE-2025-6075: Fixed quadratic complexity vulnerabilities of os.path.expandvars bsc1252974 CVE-2025-8291: Fixed validity of the ZIP64 End of Central Directory EOCD not checked by the 'zipfile' module bsc1251305 Other fixes:...

RHSA-2025:22077 Red Hat Security Advisory: tigervnc security update

Bulletin has no description...

expat security update

2.5.0-5.1 - Fix CVE-2025-59375 - Resolves: RHEL-114644...

kernel: wifi: mac80211: check S1G action frame size

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check S1G action frame size Before checking the action code, check that it even exists in the frame...

CLSA-2025-1764082387 podman: Fix of CVE-2025-47907

Rebuild with golang = 1.22.5-1.el92.tuxcare.els6 to address CVE-2025-47907...

kernel: Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix "bad unlock balance" in l2capdisconnectrsp conn-chanlock isn't acquired before l2capgetchanbyscid, if l2capgetchanbyscid returns NULL, then 'bad unlock balance' is triggered...

PT-2025-48029

Just published a technical deep-dive on a critical Kubernetes security patch. The post analyzes the new Fedora 42 advisory FEDORA-2025-4c576d1bd9 for Kubernetes 1.34, which resolves CVE-2025-28840. Read more: 👉 https://t.co/NvAzX83hZZ Security https://t.co/m1iRJKgoqQ...

openssl security update

3.5.1-4.0.2fips - Update additional upstream references 3.5.1-4.0.1fips - Add FIPS package change: add fips suffix to Release and set Epoch to 10 Orabug: 35824276 - Update FIPS module name Orabug: 35824276 3.5.1-4.0.1 - Enable openssl-fips-provider dependency Orabug: 36504822 - Temporary disable...

Security update for act (important)

openSUSE Security Update: Security update for act Announcement ID: openSUSE-SU-2025:0437-1 Rating: important References: 1253608 Cross-References: CVE-2025-47913 CVSS scores: CVE-2025-47913 SUSE: 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Affected Products: openSUSE...

openSUSE Security Advisory (SUSE-SU-2025:4137-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

TencentOS Server 3: git-lfs bug fix and enhancement update (Moderate) (TSSA-2024:1151)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:1151 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

expat security update

2.5.0-1 - Rebase to version 2.5.0 - Fix CVE-2025-59375 - Resolves: RHEL-114618...

TencentOS Server 4: kernel (TSSA-2025:0348)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0348 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

TencentOS Server 4: python3.12 (TSSA-2025:0248)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0248 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

squid: Fix of CVE-2025-62168

CVE-2025-62168: Fix failure to redact HTTP authentication credentials in error handling to prevent information disclosure...

PT-2025-47512

Name of the Vulnerable Software and Affected Versions Lookyloo versions prior to 1.35.1 Description Lookyloo, a web interface for capturing website pages and displaying domain call trees, contains a potential cross-site scripting issue on the index and tree pages. This allows for full DOM takeove...

kernel: HID: core: Harden s32ton() against conversion to 0 bits

In the Linux kernel, the following vulnerability has been resolved: HID: core: Harden s32ton against conversion to 0 bits Testing by the syzbot fuzzer showed that the HID core gets a shift-out-of-bounds exception when it tries to convert a 32-bit quantity to a 0-bit quantity. Ideally this should...