CVE-2025-39677

In the Linux kernel, the following vulnerability has been resolved: net/sched: Fix backlog accounting in qdiscdequeueinternal This issue applies for the following qdiscs: hhf, fq, fqcodel, and fqpie, and occurs in their change handlers when adjusting to the new limit. The problem is the following...

CVE-2025-39678

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/hsmp: Ensure sock-metrictbladdr is non-NULL If metric table address is not allocated, accessing metricsbin will result in a NULL pointer dereference, so add a check...

CVE-2025-39700

In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: ignore migration request to invalid nodes damonmigratepages tries migration even if the target node is invalid. If users mistakenly make such invalid requests via DAMOSMIGRATEHOT,COLD action, the below kernel...

CVE-2025-39682

In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rxlist Each recvmsg call must process either - only contiguous DATA records any number of them - one non-DATA record If the next record has different type than what has already been...

CVE-2025-50080 affecting package mysql for versions less than 8.0.43-1

CVE-2025-50080 affecting package mysql for versions less than 8.0.43-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-50084 affecting package mysql for versions less than 8.0.43-1

CVE-2025-50084 affecting package mysql for versions less than 8.0.43-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-5917 affecting package cmake for versions less than 3.30.3-8

CVE-2025-5917 affecting package cmake for versions less than 3.30.3-8. A patched version of the package is available...

CVE-2025-5918 affecting package cmake for versions less than 3.30.3-8

CVE-2025-5918 affecting package cmake for versions less than 3.30.3-8. A patched version of the package is available...

CVE-2025-50098 affecting package mysql for versions less than 8.0.43-1

CVE-2025-50098 affecting package mysql for versions less than 8.0.43-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-4673 affecting package golang for versions less than 1.18.8-9

CVE-2025-4673 affecting package golang for versions less than 1.18.8-9. A patched version of the package is available...

CVE-2025-38708

In the Linux kernel, the following vulnerability has been resolved: drbd: add missing krefget in handlewriteconflicts With two-primaries enabled, DRBD tries to detect "concurrent" writes and handle write conflicts, so that even if you write to the same sector simultaneously on both nodes, they en...

GHSA-CPQ7-6GPM-G9RC vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, opensearch-dashboards, opensearch-dashboards-fips, gitlab-rails-ce-fips...

CVE-2025-57052

cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decodearrayindexfrompointer function in cJSONUtils.c, allowing remote attackers to bypass array bounds checking and access restricted data via malformed JSON pointer strings containing alphanumeric characters...

CVE-2025-9784

A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the "MadeYouReset" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts...

postgresql: PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation

A flaw was found in PostgreSQL. A buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can lead to process termination...

GHSA-XWFJ-JGWM-7WP5 vulnerabilities

Vulnerabilities for packages: parseable, wasmcloud, shadowsocks-rust, linkerd2, oranda, linkerd2-proxy, wash, kdash, ruff, rust-analyzer, pixi, linkerd-extension-init, cargo-audit, py3-xet-core, pgcat, yazi, topgrade, rustup, uv, buck2, linkerd-network-validator, wasmtime, mountpoint-s3, ztunnel,...

GHSA-6FXP-P9MG-Q64W vulnerabilities

Vulnerabilities for packages: az, py3-knack...

php: Fix of 3 CVEs

CVE-2025-1217: http stream wrapper: fix handling folded headers - CVE-2025-1734: http stream wrapper: fix handling headers with invalid name and no colon - CVE-2025-1861: fix http redirect location truncation...

CVE-2025-54080

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions 0.28.5 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An...

postgresql: PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation

A flaw was found in PostgreSQL. A buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can lead to process termination...