CVE-2025-12119

A mongocbulkoperationt may read invalid memory if large options are passed...

CVE-2025-61663

A vulnerability has been identified in the GRUB2 bootloader's normal command that poses an immediate Denial of Service DoS risk. This flaw is a Use-after-Free issue, caused because the normal command is not properly unregistered when the module is unloaded. An attacker who can execute this comman...

CVE-2025-54771

A use-after-free vulnerability has been identified in the GNU GRUB Grand Unified Bootloader. The flaw occurs because the file-closing process incorrectly retains a memory pointer, leaving an invalid reference to a file system structure. An attacker could exploit this vulnerability to cause grub t...

CVE-2025-47906 affecting package golang for versions less than 1.24.6-1

CVE-2025-47906 affecting package golang for versions less than 1.24.6-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-40780 affecting package bind for versions less than 9.16.50-3

CVE-2025-40780 affecting package bind for versions less than 9.16.50-3. A patched version of the package is available...

[SECURITY] Fedora 42 Update: ruff-0.14.3-1.fc42

An extremely fast Python linter and code formatter, written in Rust. Ruff aims to be orders of magnitude faster than alternative tools while integrating more functionality behind a single, common interface. Ruff can be used to replace Flake8 plus dozens of plugins, Black, isort, pydocstyle,...

CVE-2025-40080 affecting package kernel for versions less than 6.6.112.1-2

CVE-2025-40080 affecting package kernel for versions less than 6.6.112.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2025-22106 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-22106 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-39972 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39972 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-39857 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39857 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-53044 affecting package mysql for versions less than 8.0.44-2

CVE-2025-53044 affecting package mysql for versions less than 8.0.44-2. An upgraded version of the package is available that resolves this issue...

CVE-2025-39849 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-39849 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-40300 affecting package kernel for versions less than 6.6.112.1-1

CVE-2025-40300 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...

CVE-2025-63745

A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and earlier within the info function of binne.c. A crafted binary input can trigger a segmentation fault, leading to a denial of service when the tool processes malformed data...

IBM DB2 User to Regain Access After Account Lockout (7250469) (Unix)

According to its self-reported version number, IBM Db2 on Unix may be affected by a vulnerability: - IBM Db2 10.5.0 through 10.5.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux could allow an authenticated user to regain access after account lockout due to...

CVE-2025-13120

A vulnerability has been found in mruby up to 3.4.0. This vulnerability affects the function sortcmp of the file src/array.c. Such manipulation leads to use after free. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The name of the patch is...

firefox: thunderbird: Race condition in the Graphics component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Race condition in the Graphics component...

firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the WebRTC: Audio/Video component...

SUSE CVE-2025-13014

Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbird 140.5...

Updated perl-FCGI packages fix security vulnerability

FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 aka fcgi library. CVE-2025-40907...