alloy-1.9.1-1.1 on GA media (moderate)

alloy-1.9.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:15207-1 Rating: moderate Cross-References: CVE-2025-22872 CVE-2025-46327 CVSS scores: CVE-2025-22872 SUSE : 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L CVE-2025-22872 SUSE : 6.3...

CVE-2025-46327 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, grafana-alloy, splunk-otel-collector-fips, opentelemetry-collector-contrib-fips, sqlexporter-fips, splunk-otel-collector, grafana-alloy-fips, sqlexporter, vault...

CVE-2025-46327 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, sqlexporter, grafana-alloy, splunk-otel-collector...

CVE-2025-46327

gosnowflake is the Snowflake Golang driver. Versions starting from 1.7.0 to before 1.13.3, are vulnerable to a Time-of-Check to Time-of-Use TOCTOU race condition. When using the Easy Logging feature on Linux and macOS, the Driver reads logging configuration from a user-provided file. On Linux and...

CVE-2025-46327

creationtimestamp| type| source ---|---|--- 2025-04-28 23:10:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13751 2025-04-28 23:45:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnvx5ugpdl2d 2025-04-29 02:36:57+00:00| seen|...

CVE-2025-46327 Go Snowflake Driver has race condition when checking access to Easy Logging configuration file

gosnowflake is the Snowflake Golang driver. Versions starting from 1.7.0 to before 1.13.3, are vulnerable to a Time-of-Check to Time-of-Use TOCTOU race condition. When using the Easy Logging feature on Linux and macOS, the Driver reads logging configuration from a user-provided file. On Linux and...

CVE-2025-46327 Go Snowflake Driver has race condition when checking access to Easy Logging configuration file

gosnowflake is the Snowflake Golang driver. Versions starting from 1.7.0 to before 1.13.3, are vulnerable to a Time-of-Check to Time-of-Use TOCTOU race condition. When using the Easy Logging feature on Linux and macOS, the Driver reads logging configuration from a user-provided file. On Linux and...

CVE-2025-46327

CVE-2025-46327 affects gosnowflake (Snowflake Go driver) versions 1.7.0 up to 1.13.3 (exclusive). The issue is a TOCTOU race in the Easy Logging feature: on Linux/macOS the driver reads logging config from a user-provided file and verifies write access only by the file owner, but the check can ra...

CVE-2025-46327 Go Snowflake Driver has race condition when checking access to Easy Logging configuration file

gosnowflake is the Snowflake Golang driver. Versions starting from 1.7.0 to before 1.13.3, are vulnerable to a Time-of-Check to Time-of-Use TOCTOU race condition. When using the Easy Logging feature on Linux and macOS, the Driver reads logging configuration from a user-provided file. On Linux and...