Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv/sriov: Perform a null check on iov before dereferencing iov. Currently, the pointer iov is dereferenced before the null check of iov, which can lead to a null pointer dereference error. This issue is fixed by movi...

com.thalesgroup.dtkit:dtkit-metrics-hudson-api (>=0.14, <=0.14.1), com.thalesgroup.jenkins-ci.plugins:cppcheck (>=0.11, <=0.14) +29 more potentially affected by CVE-2026-53436 via org.jenkins-ci.main:jenkins-core (1.397)

org.jenkins-ci.main:jenkins-core MAVEN version 1.397 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.dtkit:dtkit-metrics-hudson-api =0.14, =0.11, =1.5, =1.15, =0.3, =0.5.11 -...

com.thalesgroup.jenkins-ci.plugins:cppcheck (0.15), com.thalesgroup.jenkins-ci.plugins:xunit (1.16) +46 more potentially affected by CVE-2026-53436 via org.jenkins-ci.main:jenkins-core (1.398)

org.jenkins-ci.main:jenkins-core MAVEN version 1.398 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.jenkins-ci.plugins:cppcheck 0.15 - com.thalesgroup.jenkins-ci.plugins:xunit 1.1...

com.thalesgroup.jenkins-ci.plugins:cppcheck (>=0.16, <=0.17), org.jenkins-ci.main:jenkins-test-harness (1.407) +5 more potentially affected by CVE-2026-53435 via org.jenkins-ci.main:jenkins-core (1.407)

org.jenkins-ci.main:jenkins-core MAVEN version 1.407 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.jenkins-ci.plugins:cppcheck =0.16, =0.17 -...

com.thalesgroup.jenkins-ci.plugins:cppcheck (>=0.16, <=0.17), org.jenkins-ci.main:jenkins-test-harness (1.407) +5 more potentially affected by CVE-2026-53442 via org.jenkins-ci.main:jenkins-core (1.407)

org.jenkins-ci.main:jenkins-core MAVEN version 1.407 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.jenkins-ci.plugins:cppcheck =0.16, =0.17 -...

com.thalesgroup.jenkins-ci.plugins:cppcheck (>=0.16, <=0.17), org.jenkins-ci.main:jenkins-test-harness (1.407) +5 more potentially affected by CVE-2026-53437 via org.jenkins-ci.main:jenkins-core (1.407)

org.jenkins-ci.main:jenkins-core MAVEN version 1.407 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.jenkins-ci.plugins:cppcheck =0.16, =0.17 -...

UBUNTU-CVE-2023-54315

In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv/sriov: perform null check on iov before dereferencing iov Currently pointer iov is being dereferenced before the null check of iov which can lead to null pointer dereference errors. Fix this by moving the iov null...

com.thalesgroup.jenkins-ci.plugins:cppcheck (0.15), com.thalesgroup.jenkins-ci.plugins:xunit (1.16) +46 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:jenkins-core (1.398)

org.jenkins-ci.main:jenkins-core MAVEN version 1.398 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.jenkins-ci.plugins:cppcheck 0.15 - com.thalesgroup.jenkins-ci.plugins:xunit 1.1...

CVE-2019-14494 affecting package cppcheck for versions less than 2.18.3-1

CVE-2019-14494 affecting package cppcheck for versions less than 2.18.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-50615 affecting package cppcheck for versions less than 2.18.3-1

CVE-2024-50615 affecting package cppcheck for versions less than 2.18.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-50614 affecting package cppcheck for versions less than 2.18.3-1

CVE-2024-50614 affecting package cppcheck for versions less than 2.18.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-7868 affecting package cppcheck for versions less than 2.18.3-1

CVE-2024-7868 affecting package cppcheck for versions less than 2.18.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-39070 affecting package cppcheck for versions less than 2.18.3-1

CVE-2023-39070 affecting package cppcheck for versions less than 2.18.3-1. An upgraded version of the package is available that resolves this issue...

Fedora: Security Advisory (FEDORA-2025-9b8c8ca077)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EUVD-2023-42817

Malicious code in bioql PyPI...

EUVD-2023-1332

Malicious code in bioql PyPI...

EUVD-2022-55453

Malicious code in bioql PyPI...

com.thalesgroup.dtkit:dtkit-metrics-hudson-api (>=0.14, <=0.14.1), com.thalesgroup.jenkins-ci.plugins:cppcheck (>=0.11, <=0.14) +29 more potentially affected by CVE-2025-59474 via org.jenkins-ci.main:jenkins-core (1.397)

org.jenkins-ci.main:jenkins-core MAVEN version 1.397 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.dtkit:dtkit-metrics-hudson-api =0.14, =0.11, =1.5, =1.15, =0.3, =0.5.11 -...

com.thalesgroup.jenkins-ci.plugins:cppcheck (>=0.16, <=0.17), org.jenkins-ci.main:jenkins-test-harness (1.407) +5 more potentially affected by CVE-2025-59476 via org.jenkins-ci.main:jenkins-core (1.407)

org.jenkins-ci.main:jenkins-core MAVEN version 1.407 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.jenkins-ci.plugins:cppcheck =0.16, =0.17 -...

Security update for expat

This update for expat fixes the following issues: expat was updated to version 2.7.1: Bug fixes: Restore event pointer behavior from Expat 2.6.4 that the fix to CVE-2024-8176 changed in 2.7.0; affected API functions are: - XMLGetCurrentByteCount - XMLGetCurrentByteIndex - XMLGetCurrentColumnNumbe...