Threat database

Multiple security issues were addressed in the cpp-httplib-devel-0.28.0-1.1 package included in the GA media of openSUSE Tumbleweed. The update fixes vulnerabilities affecting this package version. No specific details about the nature of the vulnerabilities or affected versions are provided.

This entry refers to a security update for Ruby provided by the SUSE Product Security Team. It is a functional equivalent of a Red Hat advisory (RHSA-2025:23648). No specific details about the vulnerability, affected versions, or technical impact are provided in the input data.

This security update provides a functional equivalent of RHSA-2025:23309. The original Red Hat(R) advisory is available from the Red Hat web site at https://access.redhat.com/errata/RHSA-2025:23309.

This security update for Go 1.24 addresses multiple vulnerabilities including insufficient validation of bracketed IPv6 hostnames, unbounded memory allocation in archive/tar, memory exhaustion issues in encoding/asn1 and net/http, quadratic complexity in crypto/x509 and encoding/pem, and other resource consumption and panic issues. The update is provided in Go version 1.24.11 and fixes these security flaws along with other bugs and regressions.

This security update for Go version 1.25 addresses multiple vulnerabilities including excessive resource consumption, memory exhaustion, parsing errors, and information leakage across various Go standard library packages. The update advances to version 1.25.5 and fixes issues such as excessive CPU usage in net/mail and net/textproto, quadratic complexity in encoding/pem and crypto/x509, and insecure bypass patterns in net/http CrossOriginProtection. Additional fixes include panic conditions and validation errors in crypto/x509 and crypto/tls. The update also resolves other non-security bugs and improves compatibility and stability.

Multiple security issues were addressed in the go1.24-1.24.11-1.1 package for openSUSE Tumbleweed. These fixes resolve vulnerabilities present in this version of the Go language package distributed by SUSE. No specific details about the nature of the vulnerabilities or their impact are provided.

Red Hat has released updated container images for Cryostat 4.1.0 on RHEL 9 to address multiple bugs, including two security vulnerabilities: a Postgres Scan Race Condition (CVE-2025-47907) and a Netty HTTP request smuggling vulnerability (CVE-2025-58056). Users are advised to upgrade to these updated images and rebuild dependent container images to apply the fixes.

Multiple security issues were addressed in the curl-8.17.0-1.1 package included in the GA media of openSUSE Tumbleweed. These fixes resolve vulnerabilities present in prior versions of curl distributed by SUSE. No specific details about the individual flaws or their impacts are provided.

Multiple security vulnerabilities have been identified in the libsoup HTTP client and server library for GNOME, affecting Red Hat Enterprise Linux 7 Extended Lifecycle Support. These include heap buffer over-reads, out-of-bounds reads, double free, null pointer dereference, integer overflow and underflow, and denial of service issues. The vulnerabilities impact various libsoup functions related to HTTP header parsing, multipart message handling, cookie expiration date processing, and websocket server functionality.

Red Hat Advanced Cluster Management for Kubernetes 2.12.6 includes a security update addressing multiple vulnerabilities and bugs. The update provides new features, enhancements, and fixes for issues such as race conditions causing metric loss, out-of-memory errors in Postgres due to Argo integration search queries, and panic in config-policy uninstallation pods. The advisory references multiple CVEs including CVE-2025-7195 and others. The update is important for administrators managing Kubernetes clusters across cloud environments.