CLSA-2025-1739822224 samba: Fix of CVE-2023-34968

Fix CVE-2023-34968: fix path disclosure vulnerability by sanitizing search query results - Delete fixed tests from knowfail list...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: skmsg: Skip zero length skb in skmsgrecvmsg When running BPF selftests ./testprogs -t sockmapbasic on a Loongarch platform, the following kernel panic occurs: ... Oops1: CPU: 22 PID: 2824 Comm: testprogs Tainted: G OE 6.10.0-rc2+...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix DEBUGLOCKSWARNON1 when dissolvefreehugetlbfolio When I did memory failure tests recently, below warning occurs: DEBUGLOCKSWARNON1 WARNING: CPU: 8 PID: 1011 at kernel/locking/lockdep.c:232 lockacquire+0xccb/0x1ca0...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Added architecture-specific hugepteclear function. When executing mm selftests and running vmtest.sh, the following error occurs: BUG: Incorrect page state in process uffd-unit-tests. Pfn: 00000; Page: refcount: 0;...

Malicious code in pnpm-sync-api-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ff8a3208b0a7303df5e44ee0ec9bcc028b58bffe1fdabfbea89ab56a78cf841 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1256 Malicious code in pnpm-sync-api-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ff8a3208b0a7303df5e44ee0ec9bcc028b58bffe1fdabfbea89ab56a78cf841 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2023-52925

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: don't fail inserts if duplicate has expired nftables selftests fail: run-tests.sh testcases/sets/0044intervaloverlap0 Expected: 0-2 . 0-3, got: W: FAILED ./testcases/sets/0044intervaloverlap0: got 1 Insertion...

CVE-2022-33232

Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory...

CVE-2025-24964 Remote Code Execution when accessing a malicious website while Vitest API server is listening

Vitest is a testing framework powered by Vite. Affected versions are subject to arbitrary remote Code Execution when accessing a malicious website while Vitest API server is listening by Cross-site WebSocket hijacking CSWSH attacks. When api option is enabled Vitest UI enables it, Vitest starts a...

CLSA-2025-1738696117 php: Fix of CVE-2024-8929

CVE-2024-8929: fix various heap buffer over-reads for mysqlnd - Modify spec and run-tests.php to fix extension loading during testing...

Malicious code in apple-tests (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89ff93f95d8e6235296a34bf00a2cf834bcb64673a71326fba527454a5edaf89 Any computer that has this package installed or running should be considered...

MAL-2025-1016 Malicious code in apple-tests (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89ff93f95d8e6235296a34bf00a2cf834bcb64673a71326fba527454a5edaf89 Any computer that has this package installed or running should be considered...

Cisco Finds DeepSeek R1 Highly Vulnerable to Harmful Prompts

DeepSeek R1, a cost-efficient AI model, achieves impressive reasoning but fails all safety tests in a new study…...

SUSE-SU-2025:20054-1 Security update for kubevirt

This update for kubevirt fixes the following issues: - Update to version 1.3.1 Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.3.1 Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.3.0 - Fix DV error report via VM printable status - Fix permission error in...

MAL-2025-540 Malicious code in lyft-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 115bad0fa70cde21c6adc84e89cc502d81a28568a9b34867b1fcad432dc49050 The OpenSSF Package Analysis project identified 'lyft-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in lyft-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 115bad0fa70cde21c6adc84e89cc502d81a28568a9b34867b1fcad432dc49050 The OpenSSF Package Analysis project identified 'lyft-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in linkedin-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 190f39385920feb169d7fe6cc41ab7694f2ec357829ed626244c651f4980daf4 The OpenSSF Package Analysis project identified 'linkedin-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-516 Malicious code in linkedin-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 190f39385920feb169d7fe6cc41ab7694f2ec357829ed626244c651f4980daf4 The OpenSSF Package Analysis project identified 'linkedin-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in godaddy-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8c19206514a18f90dae516ee3236692ac0674022dc38e842c9a54938c4fad3c0 The OpenSSF Package Analysis project identified 'godaddy-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-474 Malicious code in godaddy-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8c19206514a18f90dae516ee3236692ac0674022dc38e842c9a54938c4fad3c0 The OpenSSF Package Analysis project identified 'godaddy-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...