CVE-2025-0665

libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve...

CVE-2025-0509

A security issue was found in Sparkle before version 2.6.4. An attacker can replace an existing signed update with another payload, bypassing Sparkle’s EdDSA signing checks...

CVE-2023-48795 affecting package erlang for versions less than 26.2.3-1

CVE-2023-48795 affecting package erlang for versions less than 26.2.3-1. A patched version of the package is available...

CVE-2025-21665

In the Linux kernel, the following vulnerability has been resolved: filemap: avoid truncating 64-bit offset to 32 bits On 32-bit kernels, folioseekholedata was inadvertently truncating a 64-bit value to 32 bits, leading to a possible infinite loop when writing to an xfs filesystem...

CVE-2025-21673

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double free of TCPServerInfo::hostname When shutting down the server in cifsputtcpsession, cifsd thread might be reconnecting to multiple DFS targets before it realizes it should exit the loop, so @server-hostnam...

CVE-2024-11187

It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources...

GHSA-2VPQ-FH52-J3WV vulnerabilities

Vulnerabilities for packages: datadog-agent, airflow...

CVE-2025-24882 vulnerabilities

Vulnerabilities for packages: guac...

CVE-2025-24014 affecting package vim for versions less than 9.1.0791-3

CVE-2025-24014 affecting package vim for versions less than 9.1.0791-3. A patched version of the package is available...

CVE-2025-0290

Removed by vendor...

CVE-2024-56779 affecting package kernel for versions less than 6.6.64.2-1

CVE-2024-56779 affecting package kernel for versions less than 6.6.64.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-53208 affecting package kernel for versions less than 6.6.64.2-1

CVE-2024-53208 affecting package kernel for versions less than 6.6.64.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-56747 affecting package kernel for versions less than 6.6.64.2-1

CVE-2024-56747 affecting package kernel for versions less than 6.6.64.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-53185 affecting package kernel for versions less than 6.6.64.2-1

CVE-2024-53185 affecting package kernel for versions less than 6.6.64.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-53052 affecting package kernel for versions less than 6.6.64.2-1

CVE-2024-53052 affecting package kernel for versions less than 6.6.64.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-53083 affecting package kernel for versions less than 6.6.64.2-1

CVE-2024-53083 affecting package kernel for versions less than 6.6.64.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-50116 affecting package kernel for versions less than 6.6.64.2-1

CVE-2024-50116 affecting package kernel for versions less than 6.6.64.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-50083 affecting package kernel for versions less than 6.6.64.2-1

CVE-2024-50083 affecting package kernel for versions less than 6.6.64.2-1. An upgraded version of the package is available that resolves this issue...

Important: Red Hat Security Advisory: gimp:2.8 security update

An update for the gimp:2.8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2025-22865

Using ParsePKCS1PrivateKey to parse a RSA key that is missing the CRT values would panic when verifying that the key is well formed...