Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from kcm not handling the strp initialization sequence correctly, which could result in a lockup warning...

glibc security update

2.28-251.0.3.22 - Forward port of Oracle patches Reviewed-by: David Faust Oracle history: April-14-2025 Cupertino Miranda - 2.28-251.0.3.16 - Forward port of Oracle patches Reviewed-by: Elena Zannoni March-26-2025 Cupertino Miranda - 2.28-251.0.3.14 - OraBug: 36625686 Add MTE support on string...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: team: improved validation of TEAMOPTIONTYPESTRING As reported by syzbot following splat 1 Ensure that user-provided data contains exactly one null byte. 1 BUG: KMSAN: uninit-value in stringnocheck lib/vsprintf.c:633 inline BUG:...

Astra Linux – vulnerability in mongo-c-driver

The bsonstringappend function in the MongoDB C Driver may be vulnerable to a buffer overflow; it might attempt to allocate a buffer that is too small, potentially leading to memory corruption in adjacent heap memory. This issue affects libbson versions prior to 1.27.1...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: Partitions: mac: fix handling of bogus partition table Several issues in partition probing have been fixed: - The bailout for a bad partoffset must use putdevsector, since the previous readpartsector succeeded. - If the partition...

Astra Linux – vulnerability in Firefox

When String.toUpperCase made a string longer, it was possible for uninitialized memory to be incorporated into the resulting string. This vulnerability was fixed in Firefox 136 and Thunderbird 136...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Check the return value of ofpropertyreadstringindex Between versions 6.10 and 6.11, the driver began crashing on my MacBookPro14,3. The property does not exist, and ‘tmp’ remains uninitialized; therefore, a random...

Siemens TeleControl Server Basic RestoreFromBackup SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens TeleControl Server Basic. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

TencentOS Server 4: pkgconf (TSSA-2024:0166)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0166 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

SUSE CVE-2025-6052

A flaw was found in how GLib's GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn't. As a result, data may be writte...

DEBIAN-CVE-2025-6052

A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be writte...

AZL-63912 CVE-2025-6052 affecting package glib for versions less than 2.78.6-3

A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be writte...

UBUNTU-CVE-2025-6052

A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be writte...

CVE-2025-6052

A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be writte...

GNU C Stock in Unspecified Vulnerabilities

The GNU C library is a standard library implementation of C developed by the GNU project to provide core API support for Linux systems, and is the basis for most C programs to run. The GNU C library suffers from a security vulnerability. An attacker could exploit the vulnerability to overwrite...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the gstringmaybeexpand function. An attacker can cause a crash or memory corruption by appending untrusted input to a GString without proper size checks, potentially resulting in denial of service. Not...

CLSA-2025-1749743798 php: Fix of CVE-2017-8923

CVE-2017-8923: fix integer overflow in string concatenation - Fix heap buffer overflow via strrepeat...

CLSA-2025-1749743304 php: Fix of CVE-2017-8923

CVE-2017-8923: fix integer overflow in string concatenation - Fix heap buffer overflow via strrepeat...

OSV-2025-454 Use-of-uninitialized-value in _cups_strcasecmp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=423573723 Crash type: Use-of-uninitialized-value Crash state: cupsstrcasecmp ppdloadconstraints ppdConflicts...

Freescout String Formatting Vulnerability

FreeScout is an open source helpdesk system built on the PHP Laravel framework, designed to provide users with functionality similar to Zendesk or Help Scout, but without sacrificing privacy or freedom. Freescout suffers from a string formatting vulnerability that stems from insufficient validati...