Updated wpa_supplicant & hostapd packages fix security vulnerability

hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail. CVE-2025-24912...

CVE-2025-27553

Relative Path Traversal vulnerability in Apache Commons VFS before 2.10.0. The FileObject API in Commons VFS has a 'resolveFile' method that takes a 'scope' parameter. Specifying 'NameScope.DESCENDENT' promises that "an exception is thrown if the resolved file is not a descendent of the base file...

CVE-2024-43382 vulnerabilities

Vulnerabilities for packages: trino...

GHSA-H8WV-9H96-M4HR vulnerabilities

Vulnerabilities for packages: nemo...

GHSA-9MV8-4V9G-HM48 vulnerabilities

Vulnerabilities for packages: systemd...

CVE-2024-9393 vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2024-9399 vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2024-0953 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2024-9603 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-G5C3-FV5W-X2CW vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2025-30349

Horde IMP through 6.2.27, as used with Horde Application Framework through 5.2.23, allows XSS that leads to account takeover via a crafted text/html e-mail message with an onerror attribute that may use base64-encoded JavaScript code, as exploited in the wild in March 2025...

GHSA-8C8W-F7WP-2JR2 vulnerabilities

Vulnerabilities for packages: croc...

CVE-2025-2584

A vulnerability was found in WebAssembly wabt 1.0.36. It has been declared as critical. This vulnerability affects the function BinaryReaderInterp::GetReturnCallDropKeepCount of the file wabt/src/interp/binary-reader-interp.cc. The manipulation leads to heap-based buffer overflow. The attack can ...

CVE-2024-9042 vulnerabilities

Vulnerabilities for packages: rancher-webhook-fips, rancher-agent...

CVE-2023-52585 affecting package kernel for versions less than 5.15.176.3-3

CVE-2023-52585 affecting package kernel for versions less than 5.15.176.3-3. A patched version of the package is available...

CVE-2024-41080 affecting package kernel for versions less than 5.15.176.3-1

CVE-2024-41080 affecting package kernel for versions less than 5.15.176.3-1. A patched version of the package is available...

CVE-2025-2338

A vulnerability, which was classified as critical, was found in tbeu matio 1.5.28. Affected is the function strdupvprintf of the file src/io.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may ...

CVE-2025-2240 vulnerabilities

Vulnerabilities for packages: apicurio-registry, wildfly...

CVE-2025-21749 affecting package kernel for versions less than 6.6.78.1-3

CVE-2025-21749 affecting package kernel for versions less than 6.6.78.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2024-12797 affecting package openssl for versions less than 3.3.3-1

CVE-2024-12797 affecting package openssl for versions less than 3.3.3-1. An upgraded version of the package is available that resolves this issue...