CVE-2025-22105 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-azure, linux-aws...

firefox: thunderbird: Use-after-free in the Audio/Video component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Audio/Video component...

firefox: thunderbird: Spoofing issue in Firefox

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Spoofing issue in Firefox...

CVE-2025-64524

cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the program to crash with a segmentation fault...

firefox: thunderbird: Mitigation bypass in the DOM: Security component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the DOM: Security component...

expat security update

2.5.0-1 - Rebase to version 2.5.0 - Fix CVE-2025-59375 - Resolves: RHEL-114618...

CVE-2025-58181

SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption...

CVE-2025-12119

A mongocbulkoperationt may read invalid memory if large options are passed...

CVE-2025-61663

A vulnerability has been identified in the GRUB2 bootloader's normal command that poses an immediate Denial of Service DoS risk. This flaw is a Use-after-Free issue, caused because the normal command is not properly unregistered when the module is unloaded. An attacker who can execute this comman...

CVE-2025-54771

A use-after-free vulnerability has been identified in the GNU GRUB Grand Unified Bootloader. The flaw occurs because the file-closing process incorrectly retains a memory pointer, leaving an invalid reference to a file system structure. An attacker could exploit this vulnerability to cause grub t...

CVE-2025-47906 affecting package golang for versions less than 1.24.6-1

CVE-2025-47906 affecting package golang for versions less than 1.24.6-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-40780 affecting package bind for versions less than 9.16.50-3

CVE-2025-40780 affecting package bind for versions less than 9.16.50-3. A patched version of the package is available...

[SECURITY] Fedora 42 Update: ruff-0.14.3-1.fc42

An extremely fast Python linter and code formatter, written in Rust. Ruff aims to be orders of magnitude faster than alternative tools while integrating more functionality behind a single, common interface. Ruff can be used to replace Flake8 plus dozens of plugins, Black, isort, pydocstyle,...

CVE-2025-39849 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39849 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-22106 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-22106 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-53044 affecting package mysql for versions less than 8.0.44-2

CVE-2025-53044 affecting package mysql for versions less than 8.0.44-2. An upgraded version of the package is available that resolves this issue...

CVE-2025-39972 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39972 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-39857 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39857 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-40300 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-40300 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-40080 affecting package kernel for versions less than 6.6.112.1-2

CVE-2025-40080 affecting package kernel for versions less than 6.6.112.1-2. An upgraded version of the package is available that resolves this issue...