CLSA-2025-1759497739 perl-HTTP-Tiny: Fix of CVE-2023-31486

CVE-2023-31486: fix insecure default TLS configuration - Enable automated tests during build...

PT-2025-40582

Name of the Vulnerable Software and Affected Versions QNAP versions prior to QTS 5.2.6.3195 build 20250715 QNAP versions prior to QuTS hero h5.2.6.3195 build 20250715 Description A flaw exists where a remote attacker with administrator privileges can trigger a denial-of-service DoS condition...

PT-2025-40560

Name of the Vulnerable Software and Affected Versions QNAP versions prior to 5.2.6.3195 build 20250715 Description A flaw exists where a remote attacker, having obtained administrator privileges, could trigger a denial-of-service DoS condition due to a NULL pointer dereference. Recommendations...

PT-2025-40581

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 5.2.6.3195 build 20250715 QNAP QuTS hero versions prior to 5.2.6.3195 build 20250715 Description A NULL pointer dereference issue exists in QNAP operating systems. A remote attacker gaining administrator access can...

PT-2025-40562

Name of the Vulnerable Software and Affected Versions QNAP versions prior to 5.2.6.3195 build 20250715 QNAP QuTS hero versions prior to 5.2.6.3195 build 20250715 Description A flaw exists that could allow a remote attacker with administrator privileges to trigger a denial-of-service DoS condition...

SUSE SLED15: cairo-devel / cairo-devel-32bit / cairo-tools / libcairo-gobject2 / etc (SUSE-SU-2025:03449-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:03449-1 advisory. - CVE-2025-50422: Fixed Poppler crash on malformed input bsc1247589 - Update to version 1.18.4: - The...

org.apache.kylin:kylin-engine-build-sdk (>=5.0.0-alpha, <=5.0.2), org.apache.ranger:ranger-kylin-plugin (>=2.5.0, <=2.9.0) +1 more potentially affected by CVE-2025-61735 via org.apache.kylin:kylin-core-common (>=4.0.4, <=5.0.2)

org.apache.kylin:kylin-core-common MAVEN version =4.0.4, =5.0.0-alpha, =2.5.0, =2.5.0, =2.9.0 Source cves: CVE-2025-61735 Source advisory: OSV:GHSA-F6M8-QM7J-FH65...

org.apache.kylin:kylin-engine-build-sdk (>=5.0.0-alpha, <=5.0.2), org.apache.ranger:ranger-kylin-plugin (>=2.5.0, <=2.9.0) +1 more potentially affected by CVE-2025-61735 via org.apache.kylin:kylin-core-common (>=4.0.4, <=5.0.2)

org.apache.kylin:kylin-core-common MAVEN version =4.0.4, =5.0.0-alpha, =2.5.0, =2.5.0, =2.9.0 Source cves: CVE-2025-61735 Source advisory: GHSA-F6M8-QM7J-FH65...

org.apache.kylin:kylin-engine-build-sdk (>=5.0.0-alpha, <=5.0.2), org.apache.ranger:ranger-kylin-plugin (>=2.5.0, <=2.9.0) +1 more potentially affected by CVE-2025-61735 via org.apache.kylin:kylin-core-common (>=4.0.4, <=5.0.2)

org.apache.kylin:kylin-core-common MAVEN version =4.0.4, =5.0.0-alpha, =2.5.0, =2.5.0, =2.9.0 Source cves: CVE-2025-61735 Source advisory: SNYK:JAVA-ORGAPACHEKYLIN-13181847...

org.apache.kylin:kylin-engine-build-sdk (>=5.0.0-alpha, <=5.0.2), org.apache.ranger:ranger-kylin-plugin (>=2.5.0, <=2.9.0) +1 more potentially affected by CVE-2025-61733 via org.apache.kylin:kylin-core-common (>=4.0.4, <=5.0.2)

org.apache.kylin:kylin-core-common MAVEN version =4.0.4, =5.0.0-alpha, =2.5.0, =2.5.0, =2.9.0 Source cves: CVE-2025-61733 Source advisory: GHSA-MR9J-4J48-XCM2...

org.apache.kylin:kylin-engine-build-sdk (>=5.0.0-alpha, <=5.0.2), org.apache.ranger:ranger-kylin-plugin (>=2.5.0, <=2.9.0) +1 more potentially affected by CVE-2025-61734 via org.apache.kylin:kylin-core-common (>=4.0.4, <=5.0.2)

org.apache.kylin:kylin-core-common MAVEN version =4.0.4, =5.0.0-alpha, =2.5.0, =2.5.0, =2.9.0 Source cves: CVE-2025-61734 Source advisory: GHSA-P86W-W5RH-M3HX...

org.apache.kylin:kylin-engine-build-sdk (>=5.0.0-alpha, <=5.0.2), org.apache.ranger:ranger-kylin-plugin (>=2.5.0, <=2.9.0) +1 more potentially affected by CVE-2025-61734 via org.apache.kylin:kylin-core-common (>=4.0.4, <=5.0.2)

org.apache.kylin:kylin-core-common MAVEN version =4.0.4, =5.0.0-alpha, =2.5.0, =2.5.0, =2.9.0 Source cves: CVE-2025-61734 Source advisory: SNYK:JAVA-ORGAPACHEKYLIN-13181860...

org.apache.kylin:kylin-engine-build-sdk (>=5.0.0-alpha, <=5.0.2), org.apache.ranger:ranger-kylin-plugin (>=2.5.0, <=2.9.0) +1 more potentially affected by CVE-2025-61734 via org.apache.kylin:kylin-core-common (>=4.0.4, <=5.0.2)

org.apache.kylin:kylin-core-common MAVEN version =4.0.4, =5.0.0-alpha, =2.5.0, =2.5.0, =2.9.0 Source cves: CVE-2025-61734 Source advisory: OSV:GHSA-P86W-W5RH-M3HX...

org.apache.kylin:kylin-engine-build-sdk (>=5.0.0-alpha, <=5.0.2), org.apache.ranger:ranger-kylin-plugin (>=2.5.0, <=2.9.0) +1 more potentially affected by CVE-2025-61735 via org.apache.kylin:kylin-core-common (>=4.0.4, <=5.0.2)

org.apache.kylin:kylin-core-common MAVEN version =4.0.4, =5.0.0-alpha, =2.5.0, =2.5.0, =2.9.0 Source cves: CVE-2025-61735 Source advisory: MEND:CVE-2025-61735...

org.apache.kylin:kylin-engine-build-sdk (>=5.0.0-alpha, <=5.0.2), org.apache.ranger:ranger-kylin-plugin (>=2.5.0, <=2.9.0) +1 more potentially affected by CVE-2025-61733 via org.apache.kylin:kylin-core-common (>=4.0.4, <=5.0.2)

org.apache.kylin:kylin-core-common MAVEN version =4.0.4, =5.0.0-alpha, =2.5.0, =2.5.0, =2.9.0 Source cves: CVE-2025-61733 Source advisory: MEND:CVE-2025-61733...

org.apache.kylin:kylin-engine-build-sdk (>=5.0.0-alpha, <=5.0.2), org.apache.ranger:ranger-kylin-plugin (>=2.5.0, <=2.9.0) +1 more potentially affected by CVE-2025-61734 via org.apache.kylin:kylin-core-common (>=4.0.4, <=5.0.2)

org.apache.kylin:kylin-core-common MAVEN version =4.0.4, =5.0.0-alpha, =2.5.0, =2.5.0, =2.9.0 Source cves: CVE-2025-61734 Source advisory: MEND:CVE-2025-61734...

Security update for cairo

This update for cairo fixes the following issues: CVE-2025-50422: Fixed Poppler crash on malformed input bsc1247589 Update to version 1.18.4: The dependency on LZO has been made optional through a build time configuration toggle. You can build Cairo against a Freetype installation that does not...

FrostWire security vulnerabilities

FrostWire is a P2P file sharing client from the FrostWire open source. A security vulnerability exists in FrostWire version 6.14.0-build-326, which stems from an overly generous permission setting that could lead to code injection and elevation of privilege...

DEBIAN-CVE-2025-11233

Starting from Rust 1.87.0 and before Rust 1.89.0, the tier 3 Cygwin target x8664-pc-cygwin didn't correctly handle path separators, causing the standard library's Path API to ignore path components separated by backslashes. Due to this, programs compiled for Cygwin that validate paths could...

CVE-2025-11233 Rust standard library didn't detect all path separators on Cygwin

Starting from Rust 1.87.0 and before Rust 1.89.0, the tier 3 Cygwin target x8664-pc-cygwin didn't correctly handle path separators, causing the standard library's Path API to ignore path components separated by backslashes. Due to this, programs compiled for Cygwin that validate paths could...