EUVD-2023-24243

Malicious code in bioql PyPI...

EUVD-2024-53380

Malicious code in bioql PyPI...

EUVD-2024-54292

Malicious code in bioql PyPI...

EUVD-2025-5596

Malicious code in bioql PyPI...

EUVD-2023-54785

Malicious code in bioql PyPI...

EUVD-2025-5597

Malicious code in bioql PyPI...

EUVD-2025-5580

Malicious code in bioql PyPI...

EUVD-2023-53896

Malicious code in bioql PyPI...

EUVD-2022-43034

Malicious code in bioql PyPI...

EUVD-2025-5590

Malicious code in bioql PyPI...

EUVD-2024-53381

Malicious code in bioql PyPI...

EUVD-2025-14163

Malicious code in bioql PyPI...

RLSA-2025:16154 Moderate: grub2 security update

The grub2 packages provide version 2 of the Grand Unified Boot Loader GRUB, a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices. Security Fixes: grub2:...

NewStart CGSL MAIN 6.06 : grub2 Multiple Vulnerabilities (NS-SA-2025-0221)

The remote NewStart CGSL host, running version MAIN 6.06, has grub2 packages installed that are affected by multiple vulnerabilities: - Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to bypass authentication, obtain sensitive information, or cause a...

CLSA-2025-1758891628 grub2: Fix of CVE-2014-4607

CVE-2014-4607: minilzo: Update to minilzo-2.08 to fix integer overflow...

The vulnerability of Grub2 operating system loaders, related to breaches of confidentiality boundaries, allows attackers to expose confidential information.

The vulnerability of Grub2 operating system loaders is related to the violation of trust boundaries. Exploiting this vulnerability can allow an attacker to disclose confidential information...

grub2: commands/dump: The dump command is not in lockdown when secure boot is enabled

A flaw was found in grub2. Grub's dump command is not blocked when grub is in lockdown mode, which allows the user to read any memory information, and an attacker may leverage this in order to extract signatures, salts, and other sensitive information from the memory...

grub2: command/gpg: Use-after-free due to hooks not being removed on module unload

A flaw was found in command/gpg. In some scenarios, hooks created by loaded modules are not removed when the related module is unloaded. This flaw allows an attacker to force grub2 to call the hooks once the module that registered it was unloaded, leading to a use-after-free vulnerability. If...

grub2: UFS: Integer overflow may lead to heap based out-of-bounds write when handling symlinks

A flaw was found in grub2. When performing a symlink lookup, the grub's UFS module checks the inode's data size to allocate the internal buffer to read the file content, however, it fails to check if the symlink data size has overflown. When this occurs, grubmalloc may be called with a smaller...

grub2: grub-core/gettext: Integer overflow leads to Heap OOB Write and Read.

When reading the language .mo file in grubmofileopen, grub2 fails to verify an integer overflow when allocating its internal buffer. A crafted .mo file may lead the buffer size calculation to overflow, leading to out-of-bound reads and writes. This flaw allows an attacker to leak sensitive data o...