EUVD-2022-54616

In the Linux kernel, the following vulnerability has been resolved: ASoC: rt7-sdw: harden jackdetecthandler Realtek headset codec drivers typically check if the card is instantiated before proceeding with the jack detection. The rt700, rt711 and rt711-sdca are however missing a check on the card...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987685)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987685 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: Do not unset preset when cleaning up codec Several functions that take part in codec's...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987612)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987612 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd934x: handle channel mappping list correctly Currently each channel is added as...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987635)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987635 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-compress: prevent the potentially use of null pointer There is one call trace that...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

JLSEC-2025-114 `dwa_uncompress` in `libavcodec/exr.c` in FFmpeg 4.4 allows an out-of-bounds array access because...

dwauncompress in libavcodec/exr.c in FFmpeg 4.4 allows an out-of-bounds array access because dccount is not strictly checked...

JLSEC-2025-111 `decode_frame` in `libavcodec/exr.c` in FFmpeg 4.3.1 has an out-of-bounds write because of errors in...

decodeframe in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations...

PT-2025-45927

In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists due to insufficient validation of certain parameters when parsing Speex codec extradata. This vulnerability could lead to integer overflow conditions, potentially resulting in...

Security Bulletin: Due to use of netty-codec, IBM Sterling Connect:Direct Web Services is affected by denial of service.

Summary Netty-codec is used by IBM Sterling Connect:Direct Web Services CVE-2025-58057. Vulnerability Details CVEID:CVE-2025-58057 DESCRIPTION: Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In...

cn.hserver:hserver (3.7.0), cn.hserver:hserver-netty-web (4.0.0-beta.3) +214 more potentially affected by CVE-2025-59419 via io.netty:netty-codec-smtp (>=4.2.0.alpha1, <=4.2.6.final)

io.netty:netty-codec-smtp MAVEN version =4.2.0.alpha1, =4.2.6.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty-codec-smtp and may be impacted: - cn.hserver:hserver 3.7.0 - cn.hserver:hserver-netty-web 4.0.0-beta.3 -...

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), ai.chronon:service_2.11 (>=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, <=0.0.115) +4334 more potentially affected by CVE-2025-59419 via io.netty:netty-codec-smtp (>=4.1.8.final, <=4.1.127.final)

io.netty:netty-codec-smtp MAVEN version =4.1.8.final, =0.0.1, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =0.0.1, =5.1.0, =2.0.21, =14.0.0, =1.0.0, =1.1.9, =1.2.1 -...

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), ai.chronon:service_2.11 (>=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, <=0.0.115) +4334 more potentially affected by CVE-2025-59419 via io.netty:netty-codec-smtp (>=4.1.8.final, <=4.1.127.final)

io.netty:netty-codec-smtp MAVEN version =4.1.8.final, =0.0.1, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =0.0.1, =5.1.0, =2.0.21, =14.0.0, =1.0.0, =1.1.9, =1.2.1 -...

cn.hserver:hserver (3.7.0), cn.hserver:hserver-netty-web (4.0.0-beta.3) +214 more potentially affected by CVE-2025-59419 via io.netty:netty-codec-smtp (>=4.2.0.alpha1, <=4.2.6.final)

io.netty:netty-codec-smtp MAVEN version =4.2.0.alpha1, =4.2.6.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty-codec-smtp and may be impacted: - cn.hserver:hserver 3.7.0 - cn.hserver:hserver-netty-web 4.0.0-beta.3 -...

CRLF Injection

Overview Affected versions of this package are vulnerable to CRLF Injection via insufficient input validation in the DefaultSmtpRequest process. An attacker can inject arbitrary SMTP commands by supplying malicious parameters containing CRLF sequences, allowing the sending of forged emails that...

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), ai.chronon:service_2.11 (>=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, <=0.0.115) +4334 more potentially affected by CVE-2025-59419 via io.netty:netty-codec-smtp (>=4.1.8.final, <=4.1.127.final)

io.netty:netty-codec-smtp MAVEN version =4.1.8.final, =0.0.1, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =0.0.1, =5.1.0, =2.0.21, =14.0.0, =1.0.0, =1.1.9, =1.2.1 -...

cn.hserver:hserver (3.7.0), cn.hserver:hserver-netty-web (4.0.0-beta.3) +214 more potentially affected by CVE-2025-59419 via io.netty:netty-codec-smtp (>=4.2.0.alpha1, <=4.2.6.final)

io.netty:netty-codec-smtp MAVEN version =4.2.0.alpha1, =4.2.6.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty-codec-smtp and may be impacted: - cn.hserver:hserver 3.7.0 - cn.hserver:hserver-netty-web 4.0.0-beta.3 -...

cn.hserver:hserver (3.7.0), cn.hserver:hserver-netty-web (4.0.0-beta.3) +214 more potentially affected by CVE-2025-59419 via io.netty:netty-codec-smtp (>=4.2.0.alpha1, <=4.2.6.final)

io.netty:netty-codec-smtp MAVEN version =4.2.0.alpha1, =4.2.6.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty-codec-smtp and may be impacted: - cn.hserver:hserver 3.7.0 - cn.hserver:hserver-netty-web 4.0.0-beta.3 -...

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), ai.chronon:service_2.11 (>=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, <=0.0.115) +4334 more potentially affected by CVE-2025-59419 via io.netty:netty-codec-smtp (>=4.1.8.final, <=4.1.127.final)

io.netty:netty-codec-smtp MAVEN version =4.1.8.final, =0.0.1, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =0.0.1, =5.1.0, =2.0.21, =14.0.0, =1.0.0, =1.1.9, =1.2.1 -...

CVE-2025-59419

Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.128.Final and 4.2.7.Final, the SMTP codec in Netty contains an SMTP command injection vulnerability due to insufficient input validation for Carriage Return \r and Line Feed \n characters in user-suppli...

CVE-2025-59419: Improper Neutralization of CRLF Sequences

Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.128.Final and 4.2.7.Final, the SMTP codec in Netty contains an SMTP command injection vulnerability due to insufficient input validation for Carriage Return \r and Line Feed \n characters in user-suppli...