389-ds-3.1.2~git90.2bc7250be-1.1 on GA media (moderate)

389-ds-3.1.2git90.2bc7250be-1.1 on GA media Announcement ID: openSUSE-SU-2025:15056-1 Rating: moderate Cross-References: CVE-2025-3416 CVSS scores: CVE-2025-3416 SUSE : 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2025-3416 SUSE : 6.3...

tealdeer-1.7.1-2.1 on GA media (moderate)

tealdeer-1.7.1-2.1 on GA media Announcement ID: openSUSE-SU-2025:15063-1 Rating: moderate Cross-References: CVE-2025-3416 CVSS scores: CVE-2025-3416 SUSE : 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2025-3416 SUSE : 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N...

pmix security update

An update is available for pmix. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Process Management Interface PMI provides process management functions for M...

libnftnl bug fix update

An update is available for libnftnl. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libnftnl packages provide a library for low-level interaction with...

kernel-rt bug fix update

An update is available for kernel-rt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Rocky Linux-79698...

poppler security update

An update is available for poppler. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Poppler is a Portable Document Format PDF rendering library, used by...

harfbuzz security update

An update is available for harfbuzz. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list HarfBuzz is an implementation of the OpenType Layout engine. Security Fixes:...

container-tools:4.0 security update

An update is available for module.python-podman, cockpit-podman, module.skopeo, module.oci-seccomp-bpf-hook, module.conmon, module.cockpit-podman, oci-seccomp-bpf-hook, slirp4netns, libslirp, python-podman, criu, conmon, module.slirp4netns, module.containers-common, containers-common,...

grafana bug fix update

An update is available for grafana. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Grafana is an open source, feature rich metrics dashboard and graph editor fo...

.NET 8.0 security, bug fix, and enhancement update

An update is available for dotnet8.0. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET is a managed-software framework. It implements a subset of the .NET...

mpg123 security update

An update is available for mpg123. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The mpg123 packages contain real time MPEG 1.0/2.0/2.5 audio player/decoder fo...

tftp bug fix and enhancement update

An update is available for tftp. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.10...

tuned security update

An update is available for tuned. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The tuned packages provide a service that tunes system settings according to a...

CVE-2020-36791

In the Linux kernel, the following vulnerability has been resolved: netsched: keep allochash updated after hash allocation In commit 599be01ee567 "netsched: fix an OOB access in clstcindex" I moved cp-hash calculation before the first tcindexallocperfecthash, but cp-allochash is left untouched...

WordPress Meow Gallery plugin <= 5.2.7 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by R4mbb in WordPress Plugin Meow Gallery versions = 5.2.7...

BIT-VAULT-2025-4166 Vault May Include Sensitive Data in Error Logs When Using the KV v2 Plugin

Vault Community and Vault Enterprise Key/Value kv Version 2 plugin may unintentionally expose sensitive information in server and audit logs when users submit malformed payloads during secret creation or update operations via the Vault REST API. This vulnerability, identified as CVE-2025-4166, is...

PT-2025-20075 · Flatpress · Flatpress

Name of the Vulnerable Software and Affected Versions: flatpress version 1.3.1 Description: The issue is related to Cross Site Scripting XSS in the Administration area, specifically via the Manage categories section. This allows for potential malicious script execution. Recommendations: For...

PT-2025-20184 · Ablocks · Ablocks

Name of the Vulnerable Software and Affected Versions: aBlocks versions 1.9.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject malicious...

libtiff security update

4.0.9-34 - fix CVE-2017-17095: heap-based buffer overflow in pal2rgb RHEL-87363...

Fedora 40 : golang-github-nvidia-container-toolkit (2025-c3c3774126)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-c3c3774126 advisory. Update to 1.17.4 Fixes CVE-2025-23359 or GHSA-4hmh-pm5p-9j7j Tenable has extracted the preceding description block directly from the Fedora security advisory...