[SECURITY] Fedora 42 Update: unbound-1.23.1-1.fc42

Unbound is a validating, recursive, and caching DNSSEC resolver. The C implementation of Unbound is developed and maintained by NLnet Labs. It is based on ideas and algorithms taken from a java prototype developed by Verisign labs, Nominet, Kirei and ep.net. Unbound is designed as a set of modula...

UBUNTU-CVE-2025-40924

Catalyst::Plugin::Session before version 0.44 for Perl generates session ids insecurely. The session id is generated from a usually SHA-1 hash of a simple counter, the epoch time, the built-in rand function, the PID and the current Catalyst context. This information is of low entropy. The PID wil...

Malicious code in @ivy-shared-components/testing (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-6031 Malicious code in @ivy-shared-components/testing (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

SUSE CVE-2025-53024

unknown...

Stack-based Buffer Overflow

International Components for Unicode ICU is vulnerable to a Stack-based Buffer Overflow. The vulnerability is due to improper handling of the ‘subtag’ struct in the SRBRoot::addTag function while running the genrb binary, which allows an attacker to cause memory corruption and achieve local...

CVE-2025-50086

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Components Services. Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...

CVE-2025-53032

...

CVE-2025-50091

CVE-2025-50091 : In Oracle MySQL, vulnerability in the MySQL Server Server: Optimizer affects versions 8.0.0–8.0.42, 8.4.0–8.4.5 and 9.0.0–9.3.0. It is described as easily exploitable with network access via multiple protocols, potentially causing a hang or crash (DOS) of MySQL Server. The CVSS b...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS via the Components Services process. An attacker can cause the server to hang or crash repeatedly by sending specially crafted requests over the network while authenticated with high privileges. Details Denial of...

CVE-2025-50073

...

CVE-2025-50076

...

CVE-2025-50060

...

CVE-2025-30762

...

CVE-2025-30754

...

CVE-2025-30751

CVE-2025-30751 affects Oracle Database Server (Oracle Database component). Affected supported versions are 19.27 and 23.4–23.8. The flaw enables a low-privileged attacker who has Create Session and Create Procedure privileges with network access via Oracle Net to compromise the database, potentia...

Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities

Summary Security vulnerabilities have been addressed in IBM Cognos Analytics 11.2.3. These vulnerabilities have also been previously addressed in IBM Cognos Analytics 11.1.7 FP5 where applicable. Multiple Cross-Site Request Forgery vulnerabilities have been addressed CVE-2020-4301, CVE-2021-20468...

Security Bulletin: IBM QRadar SIEM includes components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM QRadar SIEM has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2022-49395 DESCRIPTION: In the Linux kernel, the following vulnerability has...

Malicious code in @ivy-shared-components/iconslibrary (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-5945 Malicious code in okta-ui-private-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9cde1163c4cd1320ef67a954307e5ac2fdf19ea7925c9b0cd032910b171e6e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...