idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded

A flaw was found in idna crate. This vulnerability allows hostname spoofing and potential privilege escalation via specially crafted Punycode labels that render as ASCII or empty labels, leading to incorrect equality comparisons during hostname validation...

CVE-2023-53615

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix deletion race condition System crash when using debug kernel due to link list corruption. The cause of the link list corruption is due to session deletion was allowed to queue up twice. Here's the internal trac...

CVE-2023-53549

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Rework long task execution when adding/deleting entries When adding/deleting large number of elements in one step in ipset, it can take a reasonable amount of time and can result in soft lockup errors. The patch...

CVE-2022-50478

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix shift-out-of-bounds/overflow in nilfssb2badoffset Patch series "nilfs2: fix UBSAN shift-out-of-bounds warnings on mount time". The first patch fixes a bug reported by syzbot, and the second one fixes the remaining bug...

CVE-2025-39944

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix use-after-free bugs in otx2synctstamp The original code relies on canceldelayedwork in otx2ptpdestroy, which does not ensure that the delayed work item synctstampwork has fully completed if it was already runnin...

EUVD-2023-32974

Malicious code in bioql PyPI...

EUVD-2023-38335

Malicious code in bioql PyPI...

EUVD-2022-27915

Malicious code in bioql PyPI...

CVE-2025-46817

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead to remote code execution The problem exists in all versions of Redis with Lua scripting...

CVE-2025-5914 affecting package libarchive for versions less than 3.6.1-7

CVE-2025-5914 affecting package libarchive for versions less than 3.6.1-7. A patched version of the package is available...

CVE-2025-54126 affecting package fluent-bit for versions less than 3.0.6-3

CVE-2025-54126 affecting package fluent-bit for versions less than 3.0.6-3. A patched version of the package is available...

CVE-2025-7545 affecting package binutils for versions less than 2.37-16

CVE-2025-7545 affecting package binutils for versions less than 2.37-16. A patched version of the package is available...

CVE-2024-1930 affecting package dnf5 for versions less than 5.0.14-3

CVE-2024-1930 affecting package dnf5 for versions less than 5.0.14-3. A patched version of the package is available...

SUSE CVE-2023-53502

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2025-54289

Privilege Escalation in operations API in Canonical LXD 6.5 on multiple platforms allows attacker with read permissions to hijack terminal or console sessions and execute arbitrary commands via WebSocket connection hijacking format...

CVE-2025-59150

Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. Version 8.0.0's usage of the tls.subjectaltname keyword can lead to a segmentation fault when the decoded subjectaltname contains a NULL byte. This issue is fixed i...

CVE-2025-38464 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38464 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-39685 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-39685 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38666 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38666 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-39702 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-39702 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...