GHSA-PHG3-GV66-Q38X vulnerabilities

Vulnerabilities for packages: keycloak...

CVE-2025-1247 vulnerabilities

Vulnerabilities for packages: keycloak...

CVE-2025-1094 vulnerabilities

Vulnerabilities for packages: postgresql...

CVE-2025-21700

In the Linux kernel, the following vulnerability has been resolved: net: sched: Disallow replacing of child qdisc from one parent to another Lion Ackermann was able to create a UAF which can be abused for privilege escalation with the following script Step 1. create root qdisc tc qdisc add dev lo...

CVE-2025-1198 vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-cng...

[SECURITY] Fedora 40 Update: rust-openssl-sys-0.9.105-1.fc40

FFI bindings to OpenSSL...

[SECURITY] Fedora 40 Update: rust-nu-0.99.1-7.fc40

A new type of shell...

ROS-20250212-10

A vulnerability in the Python Babel library that helps internationalize and localize Python applications is associated with Input validation errors when processing directory traversal sequences in .dat locale files in Babel.Locale. Exploitation of the vulnerability could allow an attacker to...

CVE-2025-0927

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Filesystem bugs due to corrupt images are not considered a CVE for any filesystem that is only mountable by CAPSYSADMIN in the initial user namespace. That includes delegated mounting...

libxml2 security update

2.9.13-6.1 - Fix CVE-2022-49043 RHEL-76298...

CVE-2025-25184 vulnerabilities

Vulnerabilities for packages: ruby3.3-rack, ruby3.2-rack, logstash, ruby3.4-rack, ruby4.0-rack, kube-fluentd-operator...

CVE-2025-25184

Rack provides an interface for developing web applications in Ruby. Prior to versions 2.2.11, 3.0.12, and 3.1.10, Rack::CommonLogger can be exploited by crafting input that includes newline characters to manipulate log entries. The supplied proof-of-concept demonstrates injecting malicious conten...

CVE-2025-0516 vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-cng...

CVE-2025-1042 vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-cng...

CVE-2025-0376 vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-cng...

CVE-2024-12379 vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-cng...

CVE-2025-1244

A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking users into visiting a specially crafted website or an HTTP URL with a redirect...

CVE-2025-21695

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-uart-backlight: fix serdev race The delluartblserdevprobe function calls devmserdevdeviceopen before setting the client ops via serdevdevicesetclientops. This ordering can trigger a NULL pointer dereference in...

CVE-2025-21698

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2025-21696

In the Linux kernel, the following vulnerability has been resolved: mm: clear uffd-wp PTE/PMD state on mremap When mremaping a memory region previously registered with userfaultfd as write-protected but without UFFDFEATUREEVENTREMAP, an inconsistency in flag clearing leads to a mismatch between t...