GHSA-R6J8-C6R2-37RR vulnerabilities

Vulnerabilities for packages: kubernetes, calico, azuredisk-csi-fips, nodetaint, local-static-provisioner-fips, yunikorn-k8shim, calico-fips, docker-machine-driver-harvester, kubernetes-csi-driver-nfs-fips, kubernetes-dns-node-cache-fips, kapp, aws-efs-csi-driver, argo-rollouts-fips, kots, volcan...

CVE-2025-13281 vulnerabilities

Vulnerabilities for packages: kubernetes, calico, azuredisk-csi-fips, nodetaint, local-static-provisioner-fips, yunikorn-k8shim, calico-fips, docker-machine-driver-harvester, kubernetes-csi-driver-nfs-fips, kubernetes-dns-node-cache-fips, kapp, aws-efs-csi-driver, argo-rollouts-fips, kots, volcan...

SUSE CVE-2025-68228

In the Linux kernel, the following vulnerability has been resolved: drm/plane: Fix createinformatblob return value createinformatblob is either supposed to return a valid pointer or an error, but never NULL. The caller will dereference the blob when it is not an error, and thus will oops if NULL...

Linux Distros Unpatched Vulnerability : CVE-2025-68228

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/plane: Fix createinformatblob return value createinformatblob is either supposed to return a valid pointer or an error, but never NULL. The caller will...

CVE-2025-68228

In the Linux kernel, the following vulnerability has been resolved: drm/plane: Fix createinformatblob return value createinformatblob is either supposed to return a valid pointer or an error, but never NULL. The caller will dereference the blob when it is not an error, and thus will oops if NULL...

UBUNTU-CVE-2025-68228

In the Linux kernel, the following vulnerability has been resolved: drm/plane: Fix createinformatblob return value createinformatblob is either supposed to return a valid pointer or an error, but never NULL. The caller will dereference the blob when it is not an error, and thus will oops if NULL...

CVE-2025-68228

In the Linux kernel, the following vulnerability has been resolved: drm/plane: Fix createinformatblob return value createinformatblob is either supposed to return a valid pointer or an error, but never NULL. The caller will dereference the blob when it is not an error, and thus will oops if NULL...

CVE-2025-68228 drm/plane: Fix create_in_format_blob() return value

In the Linux kernel, the following vulnerability has been resolved: drm/plane: Fix createinformatblob return value createinformatblob is either supposed to return a valid pointer or an error, but never NULL. The caller will dereference the blob when it is not an error, and thus will oops if NULL...

CVE-2025-68228

CVE-2025-68228 concerns the Linux kernel DRM plane code: specifically create_in_format_blob() could return NULL instead of a valid pointer or an error, causing a potential kernel oops when the blob is dereferenced. The issue is resolved by returning proper error values in failure cases. Multiple ...

PT-2025-51641

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The create in format blob function in the Linux kernel’s DRM/plane subsystem could return a NULL pointer instead of a valid pointer or an error value. This could lead to a system crash...

SUSE-SU-2025:21211-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2025-62594: unsigned underflow and division-by-zero can lead to OOB pointer arithmetic and process crash bsc1252749. - CVE-2025-57807: BlobStream Forward-Seek Under-Allocation bsc1249362. - CVE-2025-62171: incomplete fix for integer...

[SECURITY] Fedora 42 Update: restic-0.18.1-1.fc42

Fast, secure, efficient backup program. restic supports the following backends for storing backups natively: Local directory sftp server via SSH HTTP REST server protocol, rest-server Amazon S3 either from Amazon or using the Minio server OpenStack Swift BackBlaze B2 Microsoft Azure Blob Storage...

[SECURITY] Fedora 43 Update: rclone-1.72.0-1.fc43

"rsync for cloud storage" - Google Drive, S3, Dropbox, Backblaze B2, One Driv e, Swift, Hubic, Wasabi, Google Cloud Storage, Azure Blob, Azure Files, Yandex Files...

[SECURITY] Fedora 43 Update: restic-0.18.1-1.fc43

Fast, secure, efficient backup program. restic supports the following backends for storing backups natively: Local directory sftp server via SSH HTTP REST server protocol, rest-server Amazon S3 either from Amazon or using the Minio server OpenStack Swift BackBlaze B2 Microsoft Azure Blob Storage...

EUVD-2025-199188

Malicious code in blob-to-base64 npm...

MAL-2025-191077 Malicious code in blob-to-base64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5c6f8ab4b22e2ba28bac2f82c7c9d577974aafda6f190626178907579e5a474 The package blob-to-base64 was found to contain malicious code. Source: ghsa-malware 200b8ce0ee413e9267ce3a929dfcf4f072860e143f01046f3361d247b9a9b6fa...

Malicious code in blob-to-base64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5c6f8ab4b22e2ba28bac2f82c7c9d577974aafda6f190626178907579e5a474 The package blob-to-base64 was found to contain malicious code. Source: ghsa-malware 200b8ce0ee413e9267ce3a929dfcf4f072860e143f01046f3361d247b9a9b6fa...

CVE-2025-40113

In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom: pas: Shutdown lite ADSP DTB on X1E The ADSP firmware on X1E has separate firmware binaries for the main firmware and the DTB. The same applies for the "lite" firmware loaded by the boot firmware. When preparing ...

CVE-2025-40113

In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom: pas: Shutdown lite ADSP DTB on X1E The ADSP firmware on X1E has separate firmware binaries for the main firmware and the DTB. The same applies for the "lite" firmware loaded by the boot firmware. When preparing ...

CVE-2025-40113

CVE-2025-40113 concerns the Linux kernel remoteproc/qcom PAS handling for the X1E ADSP, where the lite DTB firmware was left running after preparing to load new ADSP firmware. The issue stemmed from not shutting down the lite_dtb_pas_id for the DTB, leaving a memory region (&adsp_boot_dtb_mem) ac...