CVE-2024-55549

xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes...

CVE-2025-1861

In PHP from 8.1. before 8.1.32, from 8.2. before 8.2.28, from 8.3. before 8.3.19, from 8.4. before 8.4.5, when parsing HTTP redirect in the response to an HTTP request, there is currently limit on the location value size caused by limited size of the location buffer to 1024. However as per RFC911...

CVE-2024-47141 affecting package kernel for versions less than 6.6.76.1-1

CVE-2024-47141 affecting package kernel for versions less than 6.6.76.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-57802 affecting package kernel for versions less than 6.6.76.1-1

CVE-2024-57802 affecting package kernel for versions less than 6.6.76.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-21745 affecting package kernel for versions less than 6.6.78.1-3

CVE-2025-21745 affecting package kernel for versions less than 6.6.78.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2025-21640 affecting package kernel for versions less than 6.6.78.1-3

CVE-2025-21640 affecting package kernel for versions less than 6.6.78.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2024-58007 affecting package kernel for versions less than 6.6.78.1-3

CVE-2024-58007 affecting package kernel for versions less than 6.6.78.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2025-29768

Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press 'x' on such a strange filename. The issue has been fixed as of Vim...

CVE-2025-1215 affecting package vim for versions less than 9.1.0791-4

CVE-2025-1215 affecting package vim for versions less than 9.1.0791-4. A patched version of the package is available...

CVE-2023-3978 affecting package containerized-data-importer for versions less than 1.57.0-12

CVE-2023-3978 affecting package containerized-data-importer for versions less than 1.57.0-12. A patched version of the package is available...

CVE-2025-27423 affecting package vim for versions less than 9.1.1164-1

CVE-2025-27423 affecting package vim for versions less than 9.1.1164-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-26594 affecting package xorg-x11-server-Xwayland for versions less than 24.1.6-1

CVE-2025-26594 affecting package xorg-x11-server-Xwayland for versions less than 24.1.6-1. An upgraded version of the package is available that resolves this issue...

kernel security update

3.10.0-1160.119.1.0.6.el7.OL7 - media: uvcvideo: Skip parsing frames of type UVCVSUNDEFINED in uvcparseformat Benoit Sevens CVE-2024-53104 Orabug: 37584712...

CVE-2025-21845

In the Linux kernel, the following vulnerability has been resolved: mtd: spi-nor: sst: Fix SST write failure 'commit 18bcb4aa54ea "mtd: spi-nor: sst: Factor out common write operation to sstnorwritedata"' introduced a bug where only one byte of data is written, regardless of the number of bytes...

CVE-2025-21846

In the Linux kernel, the following vulnerability has been resolved: acct: perform last write from workqueue In 1 it was reported that the acct2 system call can be used to trigger NULL deref in cases where it is set to write to a file that triggers an internal lookup. This can e.g., happen when...

CVE-2025-21866

In the Linux kernel, the following vulnerability has been resolved: powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VMALLOC Erhard reported the following KASAN hit while booting his PowerMac G4 with a KASAN-enabled kernel 6.13-rc6: BUG: KASAN: vmalloc-out-of-bounds in...

CVE-2025-21863

In the Linux kernel, the following vulnerability has been resolved: iouring: prevent opcode speculation sqe-opcode is used for different tables, make sure we santitise it against speculations...

CVE-2025-21852

In the Linux kernel, the following vulnerability has been resolved: net: Add rxskb of kfreeskb to rawtpnullargs. Yan Zhai reported a BPF prog could trigger a null-ptr-deref 0 in tracekfreeskb if the prog does not check if rxsk is NULL. Commit c53795d48ee8 "net: add rxsk to tracekfreeskb" added rx...

CVE-2025-21848

In the Linux kernel, the following vulnerability has been resolved: nfp: bpf: Add check for nfpappctrlmsgalloc Add check for the return value of nfpappctrlmsgalloc in nfpbpfcmsgalloc to prevent null pointer dereference...

CVE-2025-21844

In the Linux kernel, the following vulnerability has been resolved: smb: client: Add check for nextbuffer in receiveencryptedstandard Add check for the return value of cifsbufget and cifssmallbufget in receiveencryptedstandard to prevent null pointer dereference...