Security update for rubygem-rack

This update for rubygem-rack fixes the following issues: CVE-2025-46727: possible memory exhaustion due to unbounded parameter parsing in Rack::QueryParser bsc1242894. CVE-2025-32441: deleted sessions can be restored and occupied by unauthenticated users when the Rack::Session::Pool middleware is...

SUSE-SU-2025:01586-2 Security update for rubygem-rack

This update for rubygem-rack fixes the following issues: - CVE-2025-46727: possible memory exhaustion due to unbounded parameter parsing in Rack::QueryParser bsc1242894. - CVE-2025-32441: deleted sessions can be restored and occupied by unauthenticated users when the Rack::Session::Pool middlewar...

Autoregressive Images Watermarking through Lexical Biasing: an Approach Resistant to Regeneration Attack

Autoregressive AR image generation models have gained increasing attention for their breakthroughs in synthesis quality, highlighting the need for robust watermarking to prevent misuse. However, existing in-generation watermarking techniques are primarily designed for diffusion models, where...

Hackney fails to properly release HTTP connections to the pool

Hackney fails to properly release HTTP connections to the pool after handling 307 Temporary Redirect responses. Remote attackers can exploit this to exhaust connection pools, causing denial of service in applications using the library. Fix for this issue has been included in 1.24.0 release...

GHSA-9FM9-HP7P-53MF Hackney fails to properly release HTTP connections to the pool

Hackney fails to properly release HTTP connections to the pool after handling 307 Temporary Redirect responses. Remote attackers can exploit this to exhaust connection pools, causing denial of service in applications using the library. Fix for this issue has been included in 1.24.0 release...

CVE-2025-3864

Hackney fails to properly release HTTP connections to the pool after handling 307 Temporary Redirect responses. Remote attackers can exploit this to exhaust connection pools, causing denial of service in applications using the library. Fix for this issue has been included in 1.24.0 release...

CVE-2025-3864

Hackney fails to properly release HTTP connections to the pool after handling 307 Temporary Redirect responses. Remote attackers can exploit this to exhaust connection pools, causing denial of service in applications using the library. Fix for this issue has been included in 1.24.0 release...

CVE-2025-3864 Connection pool exhaustion in hackney

Hackney fails to properly release HTTP connections to the pool after handling 307 Temporary Redirect responses. Remote attackers can exploit this to exhaust connection pools, causing denial of service in applications using the library. Fix for this issue has been included in 1.24.0 release...

CVE-2025-3864 Connection pool exhaustion in hackney

Hackney fails to properly release HTTP connections to the pool after handling 307 Temporary Redirect responses. Remote attackers can exploit this to exhaust connection pools, causing denial of service in applications using the library. Fix for this issue has been included in 1.24.0 release...

CVE-2025-3864

Hackney contains a vulnerability where it fails to properly release HTTP connections back to the pool after handling 307 Temporary Redirect responses, which can exhaust connection pools and cause denial of service in applications using the library. The issue is tied to CVE-2025-3864. A fix is inc...

Jailbreak Distillation: Renewable Safety Benchmarking

Large language models LLMs are rapidly deployed in critical applications, raising urgent needs for robust safety benchmarking. We propose Jailbreak Distillation JBDistill, a novel benchmark construction framework that "distills" jailbreak attacks into high-quality and easily-updatable safety...

XenServer - How to change the management IP addresses of all hosts in the pool

This article describes how to change the management IP address of all hosts in the pool...

Intel Processors Denial of Service Vulnerability

Intel Processors is a family of processors produced by Intel Corporation, covering a wide range of laptop, desktop, workstation, and server applications, providing basic to professional-level performance support. A denial of service vulnerability exists in Intel Processors, which stems from an...

CVE-2025-3864: Missing Release of Resource after Effective Lifetime

Hackney fails to properly release HTTP connections to the pool after handling 307 Temporary Redirect responses. Remote attackers can exploit this to exhaust connection pools, causing denial of service in applications using the library. Fix for this issue has been included in 1.24.0 release...

PT-2025-27715

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.13.0-rc3-syzkaller-gdfa94ce54f41 Description: A use-after-free issue has been identified in the Linux kernel, specifically in the page pool recycle in ring function. This issue was reported by syzbot and is...

The vulnerability of the formDhcpv6s interface in the BOA microprogramming software of TOTOLINK A3002R routers allows a perpetrator to compromise the confidentiality and integrity of the protected information.

The vulnerability of the formDhcpv6s interface in the boa microprogramming software of TOTOLINK A3002R routers is related to buffer overflow during the processing of the addrPoolStart parameter. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of th...

The vulnerability of the formDhcpv6s interface in the BOA microprogramming software of TOTOLINK A3002R routers allows a perpetrator to compromise the confidentiality and integrity of the protected information.

The vulnerability of the formDhcpv6s interface in the boa microprogramming software of TOTOLINK A3002R routers is related to buffer overflow during the processing of the addrPoolEnd parameter. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the...

CVE-2025-24460

In JetBrains TeamCity before 2024.12.1 improper access control allowed to see Projects’ names in the agent pool...

CVE-2024-29802

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Antoine Hurkmans Football Pool allows Stored XSS.This issue affects Football Pool: from n/a through 2.11.3...

CVE-2024-43139

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Antoine Hurkmans Football Pool allows Stored XSS.This issue affects Football Pool: from n/a through 2.11.9...