[SECURITY] Fedora 40 Update: rust-gstreamer-0.23.5-2.fc40

Rust bindings for GStreamer...

[SECURITY] Fedora 40 Update: rust-icu_locid_transform_data-1.5.1-1.fc40

Data for the iculocidtransform crate...

CVE-2025-43973

An issue was discovered in GoBGP before 3.35.0. pkg/packet/rtr/rtr.go does not verify that the input length corresponds to a situation in which all bytes are available for an RTR message...

CVE-2025-43964

In LibRaw before 0.21.4, tag 0x412 processing in phaseonecorrect in decoders/loadmfbacks.cpp does not enforce minimum w0 and w1 values...

CVE-2025-43963

In LibRaw before 0.21.4, phaseonecorrect in decoders/loadmfbacks.cpp allows out-of-buffer access because splitcol and splitrow values are not checked in 0x041f tag processing...

CVE-2025-43966

libheif before 1.19.6 has a NULL pointer dereference in ImageItemiden in image-items/iden.cc...

CVE-2025-43967

libheif before 1.19.6 has a NULL pointer dereference in ImageItemGrid::getdecoder in image-items/grid.cc because a grid image can reference a nonexistent image item...

CVE-2025-43961

In LibRaw before 0.21.4, metadata/tiff.cpp has an out-of-bounds read in the Fujifilm 0xf00c tag parser...

SUSE CVE-2015-3222

syscheck/seechanges.c in OSSEC 2.7 through 2.8.1 on NIX systems allows local users to execute arbitrary code as root...

[SECURITY] Fedora 42 Update: rust-idna_adapter-1.2.0-1.fc42

Back end adapter for idna...

[SECURITY] Fedora 42 Update: rust-icu_normalizer_data-1.5.1-1.fc42

Data for the icunormalizer crate...

[SECURITY] Fedora 42 Update: rust-icu_properties_data-1.5.1-1.fc42

Data for the icuproperties crate...

[SECURITY] Fedora 42 Update: rust-icu_locid_transform_data-1.5.1-1.fc42

Data for the iculocidtransform crate...

[SECURITY] Fedora 42 Update: rust-cookie_store-0.21.1-1.fc42

Implementation of Cookie storage and retrieval...

CVE-2025-43929

openactions.py in kitty before 0.41.0 does not ask for user confirmation before running a local executable file that may have been linked from an untrusted document e.g., a document opened in KDE ghostwriter...

CVE-2022-47111

7-Zip 22.01 does not report an error for certain invalid xz files, involving block flags and reserved bits. Some later versions are unaffected...

CVE-2025-3818

A vulnerability, which was classified as critical, was found in webpy web.py 0.70. Affected is the function PostgresDB.processinsertquery of the file web/db.py. The manipulation of the argument seqname leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-9042 vulnerabilities

Vulnerabilities for packages: rancher-agent...

CVE-2025-31672 vulnerabilities

Vulnerabilities for packages: opensearch...

CVE-2025-21587 vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-26-openj9, corretto, openjdk-21-openj9, openjdk-crac, openjdk-11-openj9, openjdk, openjdk-25-openj9, cof-corretto, openjdk-17-openj9...