CVE-2023-49292 affecting package golang for versions less than 1.20.7-1

CVE-2023-49292 affecting package golang for versions less than 1.20.7-1. A patched version of the package is available...

CVE-2024-7409 affecting package qemu for versions less than 8.2.0-18

CVE-2024-7409 affecting package qemu for versions less than 8.2.0-18. A patched version of the package is available...

CVE-2025-39678

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/hsmp: Ensure sock-metrictbladdr is non-NULL If metric table address is not allocated, accessing metricsbin will result in a NULL pointer dereference, so add a check...

CVE-2025-39677

In the Linux kernel, the following vulnerability has been resolved: net/sched: Fix backlog accounting in qdiscdequeueinternal This issue applies for the following qdiscs: hhf, fq, fqcodel, and fqpie, and occurs in their change handlers when adjusting to the new limit. The problem is the following...

CVE-2025-39700

In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: ignore migration request to invalid nodes damonmigratepages tries migration even if the target node is invalid. If users mistakenly make such invalid requests via DAMOSMIGRATEHOT,COLD action, the below kernel...

CVE-2025-39682

In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rxlist Each recvmsg call must process either - only contiguous DATA records any number of them - one non-DATA record If the next record has different type than what has already been...

CVE-2025-5918 affecting package cmake for versions less than 3.30.3-8

CVE-2025-5918 affecting package cmake for versions less than 3.30.3-8. A patched version of the package is available...

CVE-2025-5917 affecting package cmake for versions less than 3.30.3-8

CVE-2025-5917 affecting package cmake for versions less than 3.30.3-8. A patched version of the package is available...

CVE-2025-50080 affecting package mysql for versions less than 8.0.43-1

CVE-2025-50080 affecting package mysql for versions less than 8.0.43-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-50098 affecting package mysql for versions less than 8.0.43-1

CVE-2025-50098 affecting package mysql for versions less than 8.0.43-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-50084 affecting package mysql for versions less than 8.0.43-1

CVE-2025-50084 affecting package mysql for versions less than 8.0.43-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-4673 affecting package golang for versions less than 1.18.8-9

CVE-2025-4673 affecting package golang for versions less than 1.18.8-9. A patched version of the package is available...

CVE-2025-38708

In the Linux kernel, the following vulnerability has been resolved: drbd: add missing krefget in handlewriteconflicts With two-primaries enabled, DRBD tries to detect "concurrent" writes and handle write conflicts, so that even if you write to the same sector simultaneously on both nodes, they en...

GHSA-CPQ7-6GPM-G9RC vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards, gitlab-rails-ce, gitlab-rails-ce-fips...

CVE-2025-57052

cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decodearrayindexfrompointer function in cJSONUtils.c, allowing remote attackers to bypass array bounds checking and access restricted data via malformed JSON pointer strings containing alphanumeric characters...

CVE-2025-9784

A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the "MadeYouReset" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts...

postgresql: PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation

A flaw was found in PostgreSQL. A buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can lead to process termination...

GHSA-6FXP-P9MG-Q64W vulnerabilities

Vulnerabilities for packages: az, py3-knack...

GHSA-XWFJ-JGWM-7WP5 vulnerabilities

Vulnerabilities for packages: kdash, uv, wash, pgcat, atuin, qdrant, wadm, linkerd-extension-init, zizmor, oranda, rust-analyzer, ruff, rustup, pixi, berg, yazi, cargo-audit, ntpd-rs, parseable, mountpoint-s3, linkerd2, shadowsocks-rust, linkerd-network-validator, linkerd2-proxy, py3-xet-core,...

php: Fix of 3 CVEs

CVE-2025-1217: http stream wrapper: fix handling folded headers - CVE-2025-1734: http stream wrapper: fix handling headers with invalid name and no colon - CVE-2025-1861: fix http redirect location truncation...