MinimalReproducer

After significant efforts, stripped it down to a minimal replicator. This is just an empty project to demonstrate the issue with dependency-check-maven usage I am forced on doing by my company rules. Do check the pom.xml and do verify: mvn org.owasp:dependency-check-maven:RELEASE:aggregate Or if...

anteater

Anteater - CI/CD ゲートチェックフレームワーク 説明 Anteater は、指定された文字列、ファイル名、バイナリ、非推奨の関数、ステージング環境のコードや認証情報などが意図せずマージされるのを防ぐためのオープンフレームワークです。正規表現の構文で指定できるものは、すべて anteater で検出できます。 Anteater にマージされたくないものを正確に伝えるだけで、残りは anteater が処理します。 Anteater が何かを見つけると、ゼロ以外のコードで終了し、CI...

firefox security update

140.14.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 - diable wasisdk to prevent build failure with newer llvm 140.14.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 140.14.0-1 - Update to 140.14.0 ESR...

CVE-2026-68135

In the Linux kernel, the following vulnerability has been resolved: net: hip04: fix RX buffer leak on buildskb failure When buildskb fails in hip04rxpoll, the driver jumps to the refill path without releasing the current RX buffer and its DMA mapping. Installing a replacement buffer then overwrit...

CVE-2026-68135

The CVE-2026-68135 entry concerns the Linux kernel NIC driver hip04, where build_skb() failures in hip04_rx_poll() could bypass the release of the current RX buffer and its DMA mapping, causing resource leaks when a replacement buffer is installed. The fix keeps the current slot intact and return...

firefox security update

140.13.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 - diable wasisdk to prevent build failure with newer llvm 140.13.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 140.13.0-1 - Update to 140.13.0 ESR...

tun: free page on build_skb failure in tun_xdp_one()

...

PT-2026-47759

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the Linux kernel when the build skb function fails within the tun xdp one function. In this scenario, the system sets the return value to -ENOMEM and exits withou...

PT-2026-41882

A possible information disclosure vulnerability exists in the Vaadin Maven plugin and Vaadin Gradle plugin that exposes the full set of environment variables in build logs whenever the frontend build process exits with a non-zero status. Because the build environment may contain credentials...

CVE-2023-43502

A cross-site request forgery CSRF vulnerability in Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier allows attackers to delete Failure Causes...

CVE-2019-16554

A missing permission check in Jenkins Build Failure Analyzer Plugin 1.24.1 and earlier allows attackers with Overall/Read permission to have Jenkins evaluate a computationally expensive regular expression...

CVE-2019-16555

A user-supplied regular expression in Jenkins Build Failure Analyzer Plugin 1.24.1 and earlier was processed in a way that wasn't interruptible, allowing attackers to have Jenkins evaluate a regular expression without the ability to interrupt this process...

Fedora 42 : tkimg (2025-419c60783f)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-419c60783f advisory. Update to 2.1.0. Update bundled libpng, libtiff, to latest versions. Built against TCL/TK 9. Fix FTBFS. Tenable has extracted the preceding...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987645)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987645 advisory. In the Linux kernel, the following vulnerability has been resolved: qede: confirm skb is allocated before using qedebuildskb assumes buildskb always works and goes...

EUVD-2013-6199

Malware in sbrugna...

EUVD-2022-2490

Malicious code in bioql PyPI...

EUVD-2022-5752

Malicious code in bioql PyPI...

EUVD-2023-2425

Malicious code in bioql PyPI...

xterm security update

366-12 - Rebuild because of build failure - Resolves: RHEL-94699 - Resolves: RHEL-103430 366-11 - Fix CVE-2022-24130 - Resolves: RHEL-94699 - Resolves: RHEL-103430...

Fedora 42 : chromium (2025-502faa722e)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-502faa722e advisory. Updated to 139.0.7258.127 CVE-2025-8879: Heap buffer overflow in libaom CVE-2025-8880: Race in V8 CVE-2025-8901: Out of bounds write in ANGLE...