GHSA-XMJJ-27J3-8W2G vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-GV8F-9G4R-FJ8Q vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-R5QP-7H29-V42W vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2025-14373 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-R5QP-7H29-V42W vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2025-68329

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix WARNON in tracingbuffersmmapclose for split VMAs When a VMA is split e.g., by partial munmap or MAPFIXED, the kernel calls vmops-close on each portion. For trace buffer mappings, this results in ringbufferunmap being...

CVE-2025-68388 vulnerabilities

Vulnerabilities for packages: apm-server, cloudbeat, elastic-agent-fips, elastic-agent, apm-server-fips, cloudbeat-fips...

GHSA-3677-XXCR-WJQV vulnerabilities

Vulnerabilities for packages: confluent-common-docker, kayenta-fips, hadoop-fips, kafka, kayenta, apache-pulsar, strimzi-kafka-operator...

SUSE CVE-2025-14876

A flaw was found in the virtio-crypto device of QEMU. A malicious guest operating system can exploit a missing length limit in the AKCIPHER path, leading to uncontrolled memory allocation. This can result in a denial of service DoS on the host system by causing the QEMU process to terminate...

GHSA-W853-JP5J-5J7F vulnerabilities

Vulnerabilities for packages: airflow, open-webui, kserve, mlflow, py3-cassandra-medusa...

CVE-2025-68462

Freedombox before 25.17.1 does not set proper permissions for the backups-data directory, allowing the reading of dump files of databases...

CVE-2025-68156 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent, kserve, tempo, aws-otel-collector, nats, kubeflow-pipelines, k8sgateway, k3s, datadog-agent, keda, kine, splunk-otel-collector, opentelemetry-collector-contrib, grafana-alloy, argo-cd, k8sgpt, argo-rollouts, jaeger, argo-workflows, coredns,...

GHSA-CFPF-HRX2-8RV6 vulnerabilities

Vulnerabilities for packages: kargo, nats, k3s, k8sgpt, nrdot-collector-k8s-fips, jaeger, grafana-alloy, amazon-cloudwatch-agent, argo-rollouts, kubeflow-pipelines, eks-distro-fips, k8sgateway, argo-workflows-fips, elastic-agent-fips, argo-cd-fips, keda, argo-cd, coredns, datadog-agent,...

SUSE CVE-2022-25837

Bluetooth® Pairing in Bluetooth Core Specification v1.0B through v5.3 may permit an unauthenticated MITM to acquire credentials with two pairing devices via adjacent access when at least one device supports BR/EDR Secure Connections pairing and the other BR/EDR Legacy PIN code pairing if the MITM...

CVE-2025-67636 vulnerabilities

Vulnerabilities for packages: jenkins...

GHSA-9P56-P6MW-W8QC vulnerabilities

Vulnerabilities for packages: jenkins...

AZL-79232 CVE-2025-68146 affecting package python-filelock 3.0.12-13

filelock is a platform-independent file lock for Python. In versions prior to 3.20.1, a Time-of-Check-Time-of-Use TOCTOU race condition allows local attackers to corrupt or truncate arbitrary user files through symlink attacks. The vulnerability exists in both Unix and Windows lock file creation...

CVE-2025-68236

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: ufs-qcom: Fix UFS OCP issue during UFS power down PC=3 According to UFS specifications, the power-off sequence for a UFS device includes: - Sending an SSU command with PowerCondition=3 and await a response. - Asserting...

CVE-2025-68203

Removed by vendor...

CVE-2025-68169

In the Linux kernel, the following vulnerability has been resolved: netpoll: Fix deadlock in memory allocation under spinlock Fix a AA deadlock in refillskbs where memory allocation while holding skbpool-lock can trigger a recursive lock acquisition attempt. The deadlock scenario occurs when the...