Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    RHSA-2025:18183
    Fix available
    Packages

    libsoup3, libsoup3-debuginfo, libsoup3-debugsource, libsoup3-devel, libsoup3-doc

    Summary

    Red Hat Security Advisory: libsoup3 security update

    Published
    21 Oct 2025
    RHSA-2025:18155
    Fix available
    Packages

    firefox, firefox-debuginfo, firefox-debugsource, firefox-x11

    Summary

    Red Hat Security Advisory: firefox security update

    Published
    21 Oct 2025
    SUSE-SU-2025:3700-1
    Fix available
    Packages

    webkit2gtk3, webkit2gtk3-soup2, webkit2gtk4, webkit2gtk3, webkit2gtk3-soup2, webkit2gtk4, webkit2gtk3, webkit2gtk3-soup2, webkit2gtk4, webkit2gtk3, webkit2gtk3-soup2, webkit2gtk4, webkit2gtk3, webkit2gtk3-soup2, webkit2gtk4, webkit2gtk3, webkit2gtk3-soup2, webkit2gtk4, webkit2gtk3, webkit2gtk3-soup2, webkit2gtk4, webkit2gtk3, webkit2gtk3-soup2, webkit2gtk4, webkit2gtk3-soup2, webkit2gtk3-soup2

    Summary

    Security update for webkit2gtk3

    Published
    21 Oct 2025
    RHSA-2025:18154
    Fix available
    Packages

    firefox, firefox-debuginfo, firefox-debugsource

    Summary

    Red Hat Security Advisory: firefox security update

    Published
    21 Oct 2025
    RHSA-2025:18153
    Fix available
    Packages

    aspnetcore-runtime-9.0, aspnetcore-runtime-dbg-9.0, aspnetcore-targeting-pack-9.0, dotnet-apphost-pack-9.0, dotnet-apphost-pack-9.0-debuginfo, dotnet-host, dotnet-host-debuginfo, dotnet-hostfxr-9.0, dotnet-hostfxr-9.0-debuginfo, dotnet-runtime-9.0, dotnet-runtime-9.0-debuginfo, dotnet-runtime-dbg-9.0, dotnet-sdk-9.0, dotnet-sdk-9.0-debuginfo, dotnet-sdk-aot-9.0, dotnet-sdk-aot-9.0-debuginfo, dotnet-sdk-dbg-9.0, dotnet-targeting-pack-9.0, dotnet-templates-9.0, dotnet9.0, dotnet9.0-debugsource, netstandard-targeting-pack-2.1, dotnet-sdk-9.0-source-built-artifacts

    Summary

    Red Hat Security Advisory: .NET 9.0 security update

    Published
    21 Oct 2025
    RHSA-2025:18152
    Fix available
    Packages

    aspnetcore-runtime-8.0, aspnetcore-runtime-dbg-8.0, aspnetcore-targeting-pack-8.0, dotnet-apphost-pack-8.0, dotnet-apphost-pack-8.0-debuginfo, dotnet-hostfxr-8.0, dotnet-hostfxr-8.0-debuginfo, dotnet-runtime-8.0, dotnet-runtime-8.0-debuginfo, dotnet-runtime-dbg-8.0, dotnet-sdk-8.0, dotnet-sdk-8.0-debuginfo, dotnet-sdk-dbg-8.0, dotnet-targeting-pack-8.0, dotnet-templates-8.0, dotnet8.0, dotnet8.0-debugsource, dotnet-sdk-8.0-source-built-artifacts

    Summary

    Red Hat Security Advisory: .NET 8.0 security update

    Published
    21 Oct 2025
    RHSA-2025:18151
    Fix available
    Packages

    aspnetcore-runtime-9.0, aspnetcore-runtime-dbg-9.0, aspnetcore-targeting-pack-9.0, dotnet-apphost-pack-9.0, dotnet-apphost-pack-9.0-debuginfo, dotnet-host, dotnet-host-debuginfo, dotnet-hostfxr-9.0, dotnet-hostfxr-9.0-debuginfo, dotnet-runtime-9.0, dotnet-runtime-9.0-debuginfo, dotnet-runtime-dbg-9.0, dotnet-sdk-9.0, dotnet-sdk-9.0-debuginfo, dotnet-sdk-aot-9.0, dotnet-sdk-aot-9.0-debuginfo, dotnet-sdk-dbg-9.0, dotnet-targeting-pack-9.0, dotnet-templates-9.0, dotnet9.0, dotnet9.0-debuginfo, dotnet9.0-debugsource, netstandard-targeting-pack-2.1, dotnet-apphost-pack-9.0-debuginfo, dotnet-host-debuginfo, dotnet-hostfxr-9.0-debuginfo, dotnet-runtime-9.0-debuginfo, dotnet-sdk-9.0-debuginfo, dotnet-sdk-9.0-source-built-artifacts, dotnet-sdk-aot-9.0-debuginfo, dotnet9.0-debuginfo, dotnet9.0-debugsource

    Summary

    Red Hat Security Advisory: .NET 9.0 security update

    Published
    21 Oct 2025
    RHSA-2025:18150
    Fix available
    Packages

    aspnetcore-runtime-9.0, aspnetcore-runtime-dbg-9.0, aspnetcore-targeting-pack-9.0, dotnet, dotnet-apphost-pack-9.0, dotnet-apphost-pack-9.0-debuginfo, dotnet-host, dotnet-host-debuginfo, dotnet-hostfxr-9.0, dotnet-hostfxr-9.0-debuginfo, dotnet-runtime-9.0, dotnet-runtime-9.0-debuginfo, dotnet-runtime-dbg-9.0, dotnet-sdk-9.0, dotnet-sdk-9.0-debuginfo, dotnet-sdk-aot-9.0, dotnet-sdk-aot-9.0-debuginfo, dotnet-sdk-dbg-9.0, dotnet-targeting-pack-9.0, dotnet-templates-9.0, dotnet9.0, dotnet9.0-debuginfo, dotnet9.0-debugsource, netstandard-targeting-pack-2.1, dotnet-apphost-pack-9.0-debuginfo, dotnet-host-debuginfo, dotnet-hostfxr-9.0-debuginfo, dotnet-runtime-9.0-debuginfo, dotnet-sdk-9.0-debuginfo, dotnet-sdk-9.0-source-built-artifacts, dotnet-sdk-aot-9.0-debuginfo, dotnet9.0-debuginfo, dotnet9.0-debugsource

    Summary

    Red Hat Security Advisory: .NET 9.0 security update

    Published
    21 Oct 2025
    RHSA-2025:18149
    Fix available
    Packages

    aspnetcore-runtime-8.0, aspnetcore-runtime-dbg-8.0, aspnetcore-targeting-pack-8.0, dotnet-apphost-pack-8.0, dotnet-apphost-pack-8.0-debuginfo, dotnet-hostfxr-8.0, dotnet-hostfxr-8.0-debuginfo, dotnet-runtime-8.0, dotnet-runtime-8.0-debuginfo, dotnet-runtime-dbg-8.0, dotnet-sdk-8.0, dotnet-sdk-8.0-debuginfo, dotnet-sdk-dbg-8.0, dotnet-targeting-pack-8.0, dotnet-templates-8.0, dotnet8.0, dotnet8.0-debuginfo, dotnet8.0-debugsource, dotnet-apphost-pack-8.0-debuginfo, dotnet-hostfxr-8.0-debuginfo, dotnet-runtime-8.0-debuginfo, dotnet-sdk-8.0-debuginfo, dotnet-sdk-8.0-source-built-artifacts, dotnet8.0-debuginfo, dotnet8.0-debugsource

    Summary

    Red Hat Security Advisory: .NET 8.0 security update

    Published
    21 Oct 2025
    RHSA-2025:18148
    Fix available
    Packages

    aspnetcore-runtime-8.0, aspnetcore-runtime-dbg-8.0, aspnetcore-targeting-pack-8.0, dotnet-apphost-pack-8.0, dotnet-apphost-pack-8.0-debuginfo, dotnet-hostfxr-8.0, dotnet-hostfxr-8.0-debuginfo, dotnet-runtime-8.0, dotnet-runtime-8.0-debuginfo, dotnet-runtime-dbg-8.0, dotnet-sdk-8.0, dotnet-sdk-8.0-debuginfo, dotnet-sdk-dbg-8.0, dotnet-targeting-pack-8.0, dotnet-templates-8.0, dotnet8.0, dotnet8.0-debuginfo, dotnet8.0-debugsource, dotnet-apphost-pack-8.0-debuginfo, dotnet-hostfxr-8.0-debuginfo, dotnet-runtime-8.0-debuginfo, dotnet-sdk-8.0-debuginfo, dotnet-sdk-8.0-source-built-artifacts, dotnet8.0-debuginfo, dotnet8.0-debugsource

    Summary

    Red Hat Security Advisory: .NET 8.0 security update

    Published
    21 Oct 2025
    RHSA-2025:18098
    Fix available
    Packages

    kernel-rt, kernel-rt-core, kernel-rt-debug, kernel-rt-debug-core, kernel-rt-debug-debuginfo, kernel-rt-debug-devel, kernel-rt-debug-kvm, kernel-rt-debug-modules, kernel-rt-debug-modules-extra, kernel-rt-debuginfo, kernel-rt-debuginfo-common-x86_64, kernel-rt-devel, kernel-rt-kvm, kernel-rt-modules, kernel-rt-modules-extra, kernel-rt, kernel-rt-core, kernel-rt-debug, kernel-rt-debug-core, kernel-rt-debug-debuginfo, kernel-rt-debug-devel, kernel-rt-debug-modules, kernel-rt-debug-modules-extra, kernel-rt-debuginfo, kernel-rt-debuginfo-common-x86_64, kernel-rt-devel, kernel-rt-modules, kernel-rt-modules-extra

    Summary

    Red Hat Security Advisory: kernel-rt security update

    Published
    21 Oct 2025
    RHSA-2025:18097
    Fix available
    Packages

    webkit2gtk3, webkit2gtk3-debuginfo, webkit2gtk3-debugsource, webkit2gtk3-devel, webkit2gtk3-devel-debuginfo, webkit2gtk3-jsc, webkit2gtk3-jsc-debuginfo, webkit2gtk3-jsc-devel, webkit2gtk3-jsc-devel-debuginfo

    Summary

    Red Hat Security Advisory: webkit2gtk3 security update

    Published
    21 Oct 2025
    RHSA-2025:18070
    Fix available
    Packages

    webkit2gtk3, webkit2gtk3-debuginfo, webkit2gtk3-debugsource, webkit2gtk3-devel, webkit2gtk3-devel-debuginfo, webkit2gtk3-jsc, webkit2gtk3-jsc-debuginfo, webkit2gtk3-jsc-devel, webkit2gtk3-jsc-devel-debuginfo

    Summary

    Red Hat Security Advisory: webkit2gtk3 security update

    Published
    21 Oct 2025
    RHSA-2025:17669
    Fix available
    Packages

    podman, podman-catatonit, podman-catatonit-debuginfo, podman-debuginfo, podman-debugsource, podman-docker, podman-gvproxy, podman-gvproxy-debuginfo, podman-plugins, podman-plugins-debuginfo, podman-remote, podman-remote-debuginfo, podman-tests, podman, podman-catatonit, podman-catatonit-debuginfo, podman-debuginfo, podman-debugsource, podman-docker, podman-gvproxy, podman-gvproxy-debuginfo, podman-plugins, podman-plugins-debuginfo, podman-remote, podman-remote-debuginfo, podman-tests, bpftool, bpftool-debuginfo, kernel, kernel-core, kernel-debug, kernel-debug-core, kernel-debug-debuginfo, kernel-debug-devel, kernel-debug-modules, kernel-debug-modules-extra, kernel-debug-modules-internal, kernel-debuginfo, kernel-debuginfo-common-aarch64, kernel-debuginfo-common-ppc64le, kernel-debuginfo-common-s390x, kernel-debuginfo-common-x86_64, kernel-devel, kernel-doc, kernel-ipaclones-internal, kernel-modules, kernel-modules-extra, kernel-modules-internal, kernel-rt, kernel-rt-core, kernel-rt-debug, kernel-rt-debug-core, kernel-rt-debug-debuginfo, kernel-rt-debug-devel, kernel-rt-debug-kvm, kernel-rt-debug-modules, kernel-rt-debug-modules-extra, kernel-rt-debug-modules-internal, kernel-rt-debuginfo, kernel-rt-debuginfo-common-x86_64, kernel-rt-devel, kernel-rt-kvm, kernel-rt-modules, kernel-rt-modules-extra, kernel-rt-modules-internal, kernel-rt-selftests-internal, kernel-selftests-internal, kernel-tools, kernel-tools-debuginfo, kernel-tools-libs, kernel-tools-libs-devel, kernel-zfcpdump, kernel-zfcpdump-core, kernel-zfcpdump-debuginfo, kernel-zfcpdump-devel, kernel-zfcpdump-modules, kernel-zfcpdump-modules-extra, kernel-zfcpdump-modules-internal, perf, perf-debuginfo, python3-perf, python3-perf-debuginfo

    Summary

    Red Hat Security Advisory: OpenShift Container Platform 4.12.81 packages and security update

    Published
    21 Oct 2025
    SUSE-SU-2025:3699-1
    Fix available
    Packages

    krb5, krb5, krb5, krb5, krb5

    Summary

    Security update for krb5

    Published
    21 Oct 2025
    SUSE-SU-2025:3698-1
    Fix available
    Packages

    krb5

    Summary

    Security update for krb5

    Published
    21 Oct 2025
    RHBA-2025:15878
    Fix available
    Packages

    iwl100-firmware, iwl1000-firmware, iwl105-firmware, iwl135-firmware, iwl2000-firmware, iwl2030-firmware, iwl3160-firmware, iwl5000-firmware, iwl5150-firmware, iwl6000g2a-firmware, iwl6000g2b-firmware, iwl6050-firmware, iwl7260-firmware, libertas-sd8787-firmware, linux-firmware, linux-firmware-whence, netronome-firmware

    Summary

    Red Hat Bug Fix Advisory: linux-firmware bug fix and enhancement update

    Published
    21 Oct 2025
    Packages

    minio

    Summary

    MinIO vulnerable to privilege escalation via session policy bypass in service accounts and STS

    Published
    21 Oct 2025
    Packages

    powershell

    Summary

    PowerShell Elevation of Privilege Vulnerability

    Published
    21 Oct 2025
    Packages

    envoy

    Summary

    Envoy Lua filter use-after-free when oversized rewritten response body causes crash

    Published
    21 Oct 2025
    Packages

    envoy

    Summary

    Envoy allows large requests and responses to cause TCP connection pool crash

    Published
    21 Oct 2025
    Packages

    git-lfs

    Summary

    Git LFS may write to arbitrary files via crafted symlinks

    Published
    21 Oct 2025
    CVE-2025-26392
    No fix available
    Packages

    Summary

    Published
    21 Oct 2025
    CGA-cfvp-3p2r-mq87
    Fix available
    Packages

    kayenta-2025.1

    Summary

    Published
    21 Oct 2025
    CGA-43gx-4jcf-cr8c
    Fix available
    Packages

    kayenta-2025.1

    Summary

    Published
    21 Oct 2025
    UBUNTU-CVE-2025-12004
    No fix available
    Packages

    mediawiki, mediawiki, mediawiki, mediawiki, mediawiki, mediawiki

    Summary

    Published
    21 Oct 2025
    SUSE-SU-2025:3695-1
    Fix available
    Packages

    python-ldap

    Summary

    Security update for python-ldap

    Published
    21 Oct 2025
    BELL-CVE-2025-40004
    Fix available
    Packages

    linux-lts, linux-lts

    Summary

    Published
    21 Oct 2025
    BELL-CVE-2025-40017
    Fix available
    Packages

    linux-lts

    Summary

    Published
    21 Oct 2025
    BELL-CVE-2025-40016
    Fix available
    Packages

    linux-lts, linux-lts, linux-lts

    Summary

    Published
    21 Oct 2025
    BELL-CVE-2025-40015
    Fix available
    Packages

    linux-lts

    Summary

    Published
    21 Oct 2025
    BELL-CVE-2025-40013
    Fix available
    Packages

    linux-lts, linux-lts, linux-lts

    Summary

    Published
    21 Oct 2025
    BELL-CVE-2025-40012
    Fix available
    Packages

    linux-lts, linux-lts

    Summary

    Published
    21 Oct 2025
    BELL-CVE-2025-40010
    Fix available
    Packages

    linux-lts, linux-lts, linux-lts

    Summary

    Published
    21 Oct 2025
    BELL-CVE-2025-40009
    Fix available
    Packages

    linux-lts, linux-lts

    Summary

    Published
    21 Oct 2025
    BELL-CVE-2025-40008
    Fix available
    Packages

    linux-lts, linux-lts, linux-lts

    Summary

    Published
    21 Oct 2025
    BELL-CVE-2025-40003
    Fix available
    Packages

    linux-lts, linux-lts, linux-lts

    Summary

    Published
    21 Oct 2025
    BELL-CVE-2025-40007
    Fix available
    Packages

    linux-lts

    Summary

    Published
    21 Oct 2025
    BELL-CVE-2025-40005
    Fix available
    Packages

    linux-lts, linux-lts, linux-lts

    Summary

    Published
    21 Oct 2025
    BELL-CVE-2025-40002
    Fix available
    Packages

    linux-lts

    Summary

    Published
    21 Oct 2025
    BELL-CVE-2025-40011
    Fix available
    Packages

    linux-lts, linux-lts, linux-lts

    Summary

    Published
    21 Oct 2025
    BELL-CVE-2025-40001
    Fix available
    Packages

    linux-lts, linux-lts, linux-lts

    Summary

    Published
    21 Oct 2025
    UBUNTU-CVE-2025-62702
    No fix available
    Packages

    mediawiki, mediawiki, mediawiki, mediawiki, mediawiki, mediawiki

    Summary

    Published
    21 Oct 2025
    UBUNTU-CVE-2025-62701
    No fix available
    Packages

    mediawiki, mediawiki, mediawiki, mediawiki, mediawiki, mediawiki

    Summary

    Published
    21 Oct 2025
    UBUNTU-CVE-2025-62694
    No fix available
    Packages

    mediawiki, mediawiki, mediawiki, mediawiki, mediawiki, mediawiki

    Summary

    Published
    21 Oct 2025
    UBUNTU-CVE-2025-62699
    No fix available
    Packages

    mediawiki, mediawiki, mediawiki, mediawiki, mediawiki, mediawiki

    Summary

    Published
    21 Oct 2025
    UBUNTU-CVE-2025-62696
    No fix available
    Packages

    mediawiki, mediawiki, mediawiki, mediawiki, mediawiki, mediawiki

    Summary

    Published
    21 Oct 2025
    UBUNTU-CVE-2025-62695
    No fix available
    Packages

    mediawiki, mediawiki, mediawiki, mediawiki, mediawiki, mediawiki

    Summary

    Published
    21 Oct 2025
    CVE-2025-9133
    No fix available
    Packages

    Summary

    Published
    21 Oct 2025
    CVE-2025-8078
    No fix available
    Packages

    Summary

    Published
    21 Oct 2025