CVE-2025-3031

The Mozilla Firefox browser and Mozilla Thunderbird email client are vulnerable to an information disclosure flaw. An attacker could read 32 bits of values spilled onto the stack within a JIT compiled function . This vulnerability could allow a malicious actor to compromise the confidentiality an...

Amazon Linux 2 : firefox (ALASFIREFOX-2025-036)

The version of firefox installed on the remote host is prior to 128.8.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2FIREFOX-2025-036 advisory. Requests initiated through reader mode did not properly omit cookies with a SameSite attribute. This vulnerability...

@excelltechkylc/code-generator (>=1.0.0, <=1.0.1), @excelltechkylc/compiler (>=1.0.0, <=1.0.1) +5 more potentially affected by CVE-2024-38985 via depath (1.0.6)

depath NPM version 1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on depath and may be impacted: - @excelltechkylc/code-generator =1.0.0, =1.0.0, =1.0.6, =1.0.6, =1.0.0, =1.0.4 - vitis-lowcode-renderer 1.0.0 - vitis-lowcode-simulator-renderer 1.0.0...

@excelltechkylc/code-generator (>=1.0.0, <=1.0.1), @excelltechkylc/compiler (>=1.0.0, <=1.0.1) +5 more potentially affected by CVE-2024-38985 via depath (1.0.6)

depath NPM version 1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on depath and may be impacted: - @excelltechkylc/code-generator =1.0.0, =1.0.0, =1.0.6, =1.0.6, =1.0.0, =1.0.4 - vitis-lowcode-renderer 1.0.0 - vitis-lowcode-simulator-renderer 1.0.0...

CLSA-2025-1742472545 kernel: Fix of 9 CVEs

USB: serial: ioedgeport: fix use after free in debug printk CVE-2024-50267 - HID: core: zero-initialize the report buffer CVE-2024-50302 - dm cache: fix potential out-of-bounds access on the first resume CVE-2024-50278 - dm cache: fix out-of-bounds access to the dirty bitset when resizing...

JIT Compiler Code Execution

The vulnerability of the JIT-compiler used by Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to type mixing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

RLSA-2025:1309 Moderate: gcc-toolset-13-gcc security update

The gcc-toolset-13-gcc13 package contains the GNU Compiler Collection version 13. Security Fixes: jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods CVE-2020-11023 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and...

RLSA-2025:1300 Moderate: gcc-toolset-14-gcc security update

The gcc-toolset-14-gcc13 package contains the GNU Compiler Collection version 14. Security Fixes: jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods CVE-2020-11023 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and...

bcc bug fix update

An update is available for bcc. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list BPF Compiler Collection BCC is a toolkit for easier creation of efficient kernel...

RLSA-2025:1346 Moderate: gcc security update

The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries. Security Fixes: jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods CVE-2020-11023 For more details about the security issues, including...

com.squareup.wire:wire-compiler (3.2.1), com.squareup.wire:wire-gradle-plugin (3.2.1) +7 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (3.2.1)

com.squareup.wire:wire-runtime MAVEN version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 3.2.1 - com.squareup.wire:wire-gradle-plugin 3.2.1 -...

com.squareup.wire:proto-pruner (3.0.0-rc03), com.squareup.wire:wire-codegen-sample (3.0.0-rc03) +11 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (3.0.0-rc03)

com.squareup.wire:wire-runtime MAVEN version 3.0.0-rc03 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:proto-pruner 3.0.0-rc03 - com.squareup.wire:wire-codegen-sample 3.0.0-rc03 -...

com.squareup.wire:wire-compiler (1.1.1), com.squareup.wire:wire-gson-support (1.1.1) potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (1.1.1)

com.squareup.wire:wire-runtime MAVEN version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 1.1.1 - com.squareup.wire:wire-gson-support 1.1.1 Source cves:...

com.squareup.retrofit:converter-wire (>=1.2.1, <=1.2.2), com.squareup.wire:wire-compiler (1.0.1) +1 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (1.0.1)

com.squareup.wire:wire-runtime MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.retrofit:converter-wire =1.2.1, =1.2.2 - com.squareup.wire:wire-compiler 1.0.1 -...

com.squareup.wire:wire-compiler (1.0.0), com.squareup.wire:wire-gson-support (1.0.0) potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (1.0.0)

com.squareup.wire:wire-runtime MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 1.0.0 - com.squareup.wire:wire-gson-support 1.0.0 Source cves:...

com.squareup.wire:wire-compiler (3.3.0), com.squareup.wire:wire-gradle-plugin (3.3.0) +8 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (3.3.0)

com.squareup.wire:wire-runtime MAVEN version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 3.3.0 - com.squareup.wire:wire-gradle-plugin 3.3.0 -...

com.squareup.wire:wire-compiler (3.3.0-alpha1), com.squareup.wire:wire-gradle-plugin (3.3.0-alpha1) +8 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (3.3.0-alpha1)

com.squareup.wire:wire-runtime MAVEN version 3.3.0-alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 3.3.0-alpha1 - com.squareup.wire:wire-gradle-plugin...

com.squareup.wire:proto-pruner (3.0.2), com.squareup.wire:wire-codegen-sample (3.0.2) +18 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (3.0.2)

com.squareup.wire:wire-runtime MAVEN version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:proto-pruner 3.0.2 - com.squareup.wire:wire-codegen-sample 3.0.2 -...

com.squareup.wire:wire-compiler (2.0.0-beta2), com.squareup.wire:wire-gson-support (2.0.0-beta2) +2 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (2.0.0-beta2)

com.squareup.wire:wire-runtime MAVEN version 2.0.0-beta2 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 2.0.0-beta2 - com.squareup.wire:wire-gson-support 2.0.0-beta2...

com.squareup.wire:wire-compiler (2.0.0-beta1), com.squareup.wire:wire-gson-support (2.0.0-beta1) +2 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (2.0.0-beta1)

com.squareup.wire:wire-runtime MAVEN version 2.0.0-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 2.0.0-beta1 - com.squareup.wire:wire-gson-support 2.0.0-beta1...