70 matches found
protobuf security update
3.19.6-15 - Fix CVE-2026-0994: nested Any messages bypassing recursion depth limits 3.19.6-14 - Disable tests during build that are flaky 3.19.6-13 - Rebuilt for tests directory 3.19.6-12 - Copy patch from c9s to make emacs dependency optional Resolves: RHEL-93236...
The vulnerability of the parse_features() function in the drivers/md/dm-flakey.c driver for multiple device types (RAID and LVM) in the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the parsefeatures function in the drivers/md/dm-flakey.c driver for multiple device types RAID and LVM in the Linux kernel is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
CVE-2023-54317
In the Linux kernel, the following vulnerability has been resolved: dm flakey: don't corrupt the zero page When we need to zero some range on a block device, the function blkdevissuezeropages submits a write bio with the bio vector pointing to the zero page. If we use dm-flakey with corrupt bio...
CVE-2023-54317
In the Linux kernel, the following vulnerability has been resolved: dm flakey: don't corrupt the zero page When we need to zero some range on a block device, the function blkdevissuezeropages submits a write bio with the bio vector pointing to the zero page. If we use dm-flakey with corrupt bio...
CVE-2023-54317 dm flakey: don't corrupt the zero page
In the Linux kernel, the following vulnerability has been resolved: dm flakey: don't corrupt the zero page When we need to zero some range on a block device, the function blkdevissuezeropages submits a write bio with the bio vector pointing to the zero page. If we use dm-flakey with corrupt bio...
CVE-2023-54317
In the Linux kernel, the following vulnerability has been resolved: dm flakey: don't corrupt the zero page When we need to zero some range on a block device, the function blkdevissuezeropages submits a write bio with the bio vector pointing to the zero page. If we use dm-flakey with corrupt bio...
CLSA-2025-1765231763 golang: Fix of 3 CVEs
Update to Go 1.22.9 - Remove CVE-2024-34155, CVE-2024-34156, and CVE-2024-34158 patches - Remove fix-standard-crypto-panic.patch no longer needed - Add disablestatictestspart1.patch and disablestatictestspart2.patch to disable OpenSSL backend for static builds - Add...
EUVD-2025-117380
Malicious code in flaky-pink-gerbil npm...
EUVD-2025-105189
Malicious code in flakystingrayz3n npm...
EUVD-2025-74642
Malicious code in flakycamelivory-38 npm...
EUVD-2025-76841
Malicious code in flakyrodent-smiletea npm...
EUVD-2025-77621
Malicious code in flakyduckbronze-27 npm...
MAL-2025-102809 Malicious code in flaky_crab_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1b86555226ac0307fd556821d641f167bd13e3eea84a6bd37157dcda867df1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-79221
Malicious code in flakyalpacaz3n npm...
MAL-2025-102808 Malicious code in flaky_alpaca_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 707c1f7e1dc5bed0bd93a96912cbeb2909be878be09de8f95375af471cfdec01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-64018
Malicious code in flakyweaselz3n npm...
Malicious code in flaky_hedgehog_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dba4e5df52b8387a40a0c44935d3b2bc9a0f5a9ffa2424a2e6825a6a3b7b01e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-54294
Malicious code in flaky-gray-boar npm...