bind security update

9.16.23-31.0.1 - Fix warning when changing device file permissions Orabug: 36518580 32:9.16.23-31.2 - Replace downstream fixes with upstream changes 32:9.16.23-31.1 - Prevent cache poisoning due to weak PRNG CVE-2025-40780 - Address various spoofing attacks CVE-2025-40778...

SUSE CVE-2016-11082

An issue was discovered in Mattermost Server before 2.2.0. It allows XSS via a crafted link...

CVE-2025-64329 vulnerabilities

Vulnerabilities for packages: nerdctl-fips, docker-compose, envoy-gateway, k9s, kaniko-fips, zarf, opa, k3s, gitlab-rails-ce, consul-k8s, eksctl, gatekeeper, newrelic-infrastructure-agent, kubevela-fips, apm-server, beats-fips, rancher, neuvector-scanner, tekton-pipelines-fips,...

GHSA-M6HQ-P25P-FFR2 vulnerabilities

Vulnerabilities for packages: nerdctl-fips, docker-compose, envoy-gateway, k9s, kaniko-fips, zarf, opa, k3s, gitlab-rails-ce, consul-k8s, eksctl, gatekeeper, newrelic-infrastructure-agent, kubevela-fips, apm-server, beats-fips, rancher, neuvector-scanner, tekton-pipelines-fips,...

GHSA-QW9X-CQR3-WC7R vulnerabilities

Vulnerabilities for packages: kubernetes, nvidia-container-toolkit, k3s, sriov-network-device-plugin, podman, node-feature-discovery, buildah, falco-no-driver, grafana-alloy...

CVE-2025-31133 vulnerabilities

Vulnerabilities for packages: kubernetes, nvidia-container-toolkit, k3s, sriov-network-device-plugin, podman, node-feature-discovery, buildah, falco-no-driver, grafana-alloy...

runc security update

4:1.2.5-3 - Add relevant patches to CVEs - Resolves: RHEL-122402 4:1.2.5-2 - fix CVE-2025-31133 CVE-2025-52565 CVE-2025-52881 - Resolves: RHEL-122402 - Resolves: RHEL-122404 - Resolves: RHEL-122415 4:1.2.5-1 - update to https://github.com/opencontainers/runc/releases/tag/v1.2.5 - Related: RHEL-60...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling...

CVE-2025-12060 affecting package keras for versions less than 3.3.3-5

CVE-2025-12060 affecting package keras for versions less than 3.3.3-5. A patched version of the package is available...

[SECURITY] Fedora 42 Update: qt5-qttranslations-5.15.18-1.fc42

Qt5 - QtTranslations module...

[SECURITY] Fedora 42 Update: fcitx-qt5-1.2.6-30.fc42

This package provides Fcitx Qt5 input context...

CVE-2025-60753

An issue was discovered in libarchive bsdtar before version 3.8.1 in function applysubstitution in file tar/subst.c when processing crafted -s substitution rules. This can cause unbounded memory allocation and lead to denial of service Out-of-Memory crash...

CVE-2025-64458

An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. NFKC normalization in Python is slow on Windows. As a consequence, django.http.HttpResponseRedirect, django.http.HttpResponsePermanentRedirect, and the shortcut django.shortcuts.redirect were subject to a...

CVE-2025-46404

A denial of service vulnerability exists in the lassoproviderverifysamlsignature functionality of Entr'ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability...

CVE-2025-62769

Potential SQL injection via connector keyword argument in QuerySet and Q objects...

GHSA-5RRX-JJJQ-Q2R5 vulnerabilities

Vulnerabilities for packages: dotnet, dotnet-bootstrap...

GHSA-5JPX-9HW9-2FX4 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu...

CVE-2025-37727 vulnerabilities

Vulnerabilities for packages: ruby3.2-elasticsearch, elasticsearch-fips, ruby3.4-elasticsearch, conductor-fips, ruby3.3-elasticsearch, conductor...

GHSA-56R7-H6MW-RCFV vulnerabilities

Vulnerabilities for packages: ruby3.2-elasticsearch, elasticsearch-fips, ruby3.4-elasticsearch, conductor-fips, ruby3.3-elasticsearch, conductor...

xorg: xmayland: Use-after-free in XPresentNotify structure creation

A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can leave dangling pointers that lead to a use-after-free condition. This can cause memory corruption or a crash, potentially allowing an...