OESA-2025-1406 transfig security update

The transfig utility creates a makefile which translates FIG created by xfig or PIC figures into a specified LaTeX graphics language for example, PostScriptTM. Transfig is used to create TeX documents which are portable i.e., they can be printed in a wide variety of environments. Security Fixes:...

EulerOS 2.0 SP11 : vim (EulerOS-SA-2025-1380)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does no...

EulerOS 2.0 SP11 : vim (EulerOS-SA-2025-1379)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does no...

hdf5: multiple CVEs

HDF5 Library through 1.14.3 has a SEGV in H5VMmemcpyvv in H5VM.c...

CVE-2025-3359

A flaw was found in GNUPlot. A segmentation fault via IOstrinitstaticinternal may jeopardize the environment...

DEBIAN-CVE-2025-3359

A flaw was found in GNUPlot. A segmentation fault via IOstrinitstaticinternal may jeopardize the environment...

CVE-2025-3359

A flaw was found in GNUPlot. A segmentation fault via IOstrinitstaticinternal may jeopardize the environment...

UBUNTU-CVE-2025-3359

A flaw was found in GNUPlot. A segmentation fault via IOstrinitstaticinternal may jeopardize the environment...

CVE-2025-3359 Gnuplot: segmentation fault via io_str_init_static_internal function

A flaw was found in GNUPlot. A segmentation fault via IOstrinitstaticinternal may jeopardize the environment...

CVE-2025-3359 Gnuplot: segmentation fault via io_str_init_static_internal function

A flaw was found in GNUPlot. A segmentation fault via IOstrinitstaticinternal may jeopardize the environment...

CVE-2025-3359

CVE-2025-3359 affects GNUPlot. The concrete issue is an out-of-bounds read when parsing font names that may lead to a segmentation fault (DoS) in affected builds (noted in SUSE advisories SUSE-SU-2025:01811-1/2 and related entries; Ubuntu USN-7773-1 references also list CVE-2025-3359 among gnuplo...

CVE-2025-3359

A flaw was found in GNUPlot. A segmentation fault via IOstrinitstaticinternal may jeopardize the environment...

USN-7416-1: Kamailio vulnerabilities

Stelios Tsampas discovered that Kamailio did not correctly handle certain memory operations, which could lead to a buffer overflow. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 16.04 LTS. CVE-2016-2385...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Kamailio vulnerabilities (USN-7416-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7416-1 advisory. Stelios Tsampas discovered that Kamailio did not correctly handle certain memory operations, which could lead to a buffer overflo...

GNUPlot 代码问题漏洞

GNUPlot is a command line interactive tool by Leon Sorokin, a personal developer, that allows users to convert data and data functions into easily viewable planar or three-dimensional shapes by entering commands. A code issue vulnerability exists in GNUPlot, which stems from IOstrinitstaticintern...

The vulnerability of the functions intel_iommu_init() (drivers/iommu/intel/iommu.c) and enable_drhd_fault_handling() (drivers/iommu/intel/dmar.c) in the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the functions inteliommuinit drivers/iommu/intel/iommu.c and enabledrhdfaulthandling drivers/iommu/intel/dmar.c in the Linux kernel is related to insufficient locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2025-15226

Name of the Vulnerable Software and Affected Versions: GNUPlot affected versions not specified Description: A flaw was found in GNUPlot, where a segmentation fault via IO str init static internal may jeopardize the environment. Recommendations: At the moment, there is no information about a newer...

SUSE CVE-2025-21974

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: return fail if interface is down in bnxtqueuememalloc The bnxtqueuememalloc is called to allocate new queue memory when a queue is restarted. It internally accesses rx buffer descriptor corresponding to the index. The ...

FreeBSD : Mozilla -- DoS via segmentation fault (f38dd0f1-116c-11f0-8b2c-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the f38dd0f1-116c-11f0-8b2c-b42e991fc52e advisory. [email protected] reports: When segmenting specially crafted text, segmentation would corrupt memory...

SUSE CVE-2025-21939

In the Linux kernel, the following vulnerability has been resolved: drm/xe/hmm: Don't dereference struct page pointers without notifier lock The pnfs that we obtain from hmmrangefault point to pages that we don't have a reference on, and the guarantee that they are still in the cpu page-tables is...