CVE-2025-38146 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38146 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...

CVE-2025-54801 vulnerabilities

Vulnerabilities for packages: gatus...

CVE-2025-54576 vulnerabilities

Vulnerabilities for packages: grafana-pyroscope...

CVE-2025-54576 vulnerabilities

Vulnerabilities for packages: grafana-pyroscope...

GHSA-7RH7-C77V-6434 vulnerabilities

Vulnerabilities for packages: grafana-pyroscope...

git: Fix of CVE-2025-27613

CVE-2025-27613: fix vulnerability where Gitk can write and truncate arbitrary writable files...

CVE-2025-8584

A vulnerability classified as problematic was found in libav up to 12.3. Affected by this vulnerability is the function avbufferunref of the file libavutil/buffer.c of the component AVI File Parser. The manipulation leads to null pointer dereference. Local access is required to approach this...

sqlite security update

3.7.17-8.0.1.1 - Fix for CVE-2025-6965 Orabug: 38260859...

python-setuptools security update

0.9.8-7.0.3 - Fix CVE-2025-47273 Orabug: 38247921...

GHSA-Q6GG-9F92-R9WG vulnerabilities

Vulnerabilities for packages: traefik, traefik-fips...

CVE-2025-54386 vulnerabilities

Vulnerabilities for packages: traefik, traefik-fips...

CVE-2025-50422

Cairo through 1.18.4, as used in Poppler through 25.08.0, has an "unscaled-face == NULL" assertion failure for cairoftunscaledfontfini in cairo-ft-font.c...

CVE-2025-54351

In iperf before 3.19.1, net.c has a buffer overflow when --skip-rx-copy is used for MSGTRUNC in recv...

CVE-2023-32253

A flaw was found in the Linux kernel's ksmbd component. A deadlock is triggered by sending multiple concurrent session setup requests, possibly leading to a denial of service...

CVE-2025-23279

NVIDIA .run Installer for Linux and Solaris contains a vulnerability where an attacker could use a race condition to escalate privileges. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, denial of service, or data tampering...

CVE-2023-32256

A flaw was found in the Linux kernel's ksmbd component. A race condition between smb2 close operation and logoff in multichannel connections could result in a use-after-free issue...

GHSA-WPRM-FGRX-XJ42 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.0, nvidia-nsight-compute-12.8, newrelic-fluent-bit-output, nvidia-nsight-compute-12.9, nvidia-nsight-compute-13.2, kubeflow-katib, agentbeat, nemo, nvidia-nsight-compute-13.1...

CVE-2025-45767

jose v6.0.10 was discovered to contain weak encryption. NOTE: this is disputed by a third party because the claim of "do not meet recommended security standards" does not reflect guidance in a final publication...

CVE-2023-32251

A vulnerability has been identified in the Linux kernel's ksmbd component kernel SMB/CIFS server. A security control designed to prevent dictionary attacks, which introduces a 5-second delay during session setup, can be bypassed through the use of asynchronous requests. This bypass negates the...

CVE-2025-48071

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.3.2 through 3.3.0, there is a heap-based buffer overflow during a write operation when decompressing ZIPS-packed deep scan-line EXR files...