Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: mm: hugememory: use !CONFIG64BIT to relax huge page alignment on 32-bit machines Yves-Alexis Perez reported a commit 4ef9ad19e176 “mm: hugememory: don’t force huge page alignment on 32-bit machines” which did not work for x8632 1...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fixed an issue where the index out of bounds occurred in the DCN30 degamma hardware format translation. This commit addresses a potential index out of bounds issue in the cm3helpertranslatecurvetodegammahwformat...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft USA. A security vulnerability exists in Microsoft Windows. An attacker can exploit the vulnerability to elevate privileges. The following products and versions are affected:Windows 10 Version 1809 for...

AZL-56640 CVE-2025-1147 affecting package binutils for versions less than 2.37-20

A vulnerability has been found in GNU Binutils 2.43 and classified as problematic. Affected by this vulnerability is the function sanitizer::internalstrlen of the file binutils/nm.c of the component nm. The manipulation of the argument const leads to buffer overflow. The attack can be launched...

Security update for python39

This update for python39 fixes the following issues: CVE-2025-0938: domain names containing square brackets are not identified as incorrect by urlparse. bsc1236705 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch...

CVE-2020-5232

A user who owns an ENS domain can set a trapdoor, allowing them to transfer ownership to another user, and later regain ownership without the new owners consent or awareness. A new ENS deployment is being rolled out that fixes this vulnerability in the ENS registry...

mysql: InnoDB unspecified vulnerability (CPU Oct 2023)

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.43 and prior, 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Serve...

SUSE-SU-2025:20041-1 Security update for systemd

This update for systemd fixes the following issues: - Import commit 0512d0d1fc0b54a84964281708036a46ab39c153 0512d0d1fc cgroup: Rename effective limits internal table jscPED-5659 765846b70b cgroup: Restrict effective limits with global resource provision jscPED-5659 e29909088b test: Add effective...

RHEL 7 : tuned (RHSA-2025:0881)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:0881 advisory. The tuned packages provide a service that tunes system settings according to a selected profile. Security Fixes: tuned: improper sanitization of...

CVE-2023-38739

creationtimestamp| type| source ---|---|--- 2025-01-31 16:15:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh2fhr7hkm2i 2025-01-31 19:34:38+00:00| seen| https://t.me/cvedetector/16976 2025-01-31 19:35:27+00:00| seen|...

CVE-2025-24827

creationtimestamp| type| source ---|---|--- 2025-01-31 13:15:50+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh23fq27m427 2025-01-31 15:22:27+00:00| seen| https://t.me/cvedetector/16933 2025-02-01 17:28:08+00:00| seen|...

DEBIAN-CVE-2025-21665

In the Linux kernel, the following vulnerability has been resolved: filemap: avoid truncating 64-bit offset to 32 bits On 32-bit kernels, folioseekholedata was inadvertently truncating a 64-bit value to 32 bits, leading to a possible infinite loop when writing to an xfs filesystem...

AZL-56265 CVE-2025-21665 affecting package kernel for versions less than 5.15.180.1-1

In the Linux kernel, the following vulnerability has been resolved: filemap: avoid truncating 64-bit offset to 32 bits On 32-bit kernels, folioseekholedata was inadvertently truncating a 64-bit value to 32 bits, leading to a possible infinite loop when writing to an xfs filesystem...

AZL-56291 CVE-2025-21665 affecting package kernel for versions less than 6.6.76.1-1

In the Linux kernel, the following vulnerability has been resolved: filemap: avoid truncating 64-bit offset to 32 bits On 32-bit kernels, folioseekholedata was inadvertently truncating a 64-bit value to 32 bits, leading to a possible infinite loop when writing to an xfs filesystem...

AZL-56351 CVE-2025-21667 affecting package kernel for versions less than 6.6.76.1-1

In the Linux kernel, the following vulnerability has been resolved: iomap: avoid avoid truncating 64-bit offset to 32 bits on 32-bit kernels, iomapwritedelallocscan was inadvertently using a 32-bit position due to folionextindex returning an unsigned long. This could lead to an infinite loop when...

CVE-2025-24632

creationtimestamp| type| source ---|---|--- 2025-01-31 09:17:09+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzo2vzce22f 2025-01-31 10:15:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3640 2025-01-31 11:11:31+00:00| seen| https://t.me/cvedetector/16906...

CVE-2025-0507

creationtimestamp| type| source ---|---|--- 2025-01-31 04:31:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113921090669736904 2025-01-31 05:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzal4miix2t 2025-01-31 07:00:11+00:00| seen|...

CVE-2024-23929

creationtimestamp| type| source ---|---|--- 2025-01-31 00:34:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113920157405208995 2025-01-31 01:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgyt5zh3e42i 2025-01-31 03:35:36+00:00| seen|...

CVE-2025-0880

creationtimestamp| type| source ---|---|--- 2025-01-30 21:16:18+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgyfrkrkxe2t 2025-01-31 01:08:41+00:00| seen| https://t.me/cvedetector/16838...

CVE-2025-24376

creationtimestamp| type| source ---|---|--- 2025-01-30 15:58:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113918130082310835 2025-01-30 16:16:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxuz2zqq22c 2025-01-30 18:26:59+00:00| seen|...