CVE-2025-40286

In the Linux kernel, the following vulnerability has been resolved: smb/server: fix possible memory leak in smb2read Memory leak occurs when ksmbdvfsread fails. Fix this by adding the missing kvfree...

GHSA-J7C9-79X7-8HPR vulnerabilities

Vulnerabilities for packages: caddy, caddy-fips...

GHSA-WMFR-VXM2-PX6Q vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

CVE-2018-14603 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

CVE-2019-9218 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

GHSA-4W7W-4PPQ-M6F2 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

GHSA-F4FF-RC49-G8HC vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

GHSA-G6G8-99M5-JJ82 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

GHSA-VP89-PHVM-4CJR vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

GHSA-2JCR-4R89-72R6 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

CVE-2019-15577 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

CVE-2018-14606 vulnerabilities

Vulnerabilities for packages: gitlab-operator-fips...

CVE-2025-12977 affecting package fluent-bit for versions less than 3.0.6-6

CVE-2025-12977 affecting package fluent-bit for versions less than 3.0.6-6. A patched version of the package is available...

CVE-2025-12816 affecting package reaper for versions less than 3.1.1-21

CVE-2025-12816 affecting package reaper for versions less than 3.1.1-21. A patched version of the package is available...

CVE-2018-19827 affecting package reaper for versions less than 3.1.1-20

CVE-2018-19827 affecting package reaper for versions less than 3.1.1-20. A patched version of the package is available...

GHSA-93F3-23RQ-PJFP vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce...

CVE-2025-6966

NULL pointer dereference in TagSection.keys in python-apt on APT-based Linux systems allows a local attacker to cause a denial of service process crash via a crafted deb822 file with a malformed non-UTF-8 key...

CVE-2025-64506 affecting package libpng for versions less than 1.6.51-1

CVE-2025-64506 affecting package libpng for versions less than 1.6.51-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-40243

In the Linux kernel, the following vulnerability has been resolved: hfs: fix KMSAN uninit-value issue in hfsfindsetzerobits The syzbot reported issue in hfsfindsetzerobits: ===================================================== BUG: KMSAN: uninit-value in hfsfindsetzerobits+0x74d/0xb60...

CVE-2025-40241

In the Linux kernel, the following vulnerability has been resolved: erofs: fix crafted invalid cases for encoded extents Robert recently reported two corrupted images that can cause system crashes, which are related to the new encoded extents introduced in Linux 6.15: - The first one 1 has plen !...