[SECURITY] Fedora 42 Update: fcitx5-anthy-5.1.8-1.fc42

Anthy Wrapper for Fcitx5 Ported from scim-anthy. Released under GPL2+...

[SECURITY] Fedora 42 Update: fcitx5-5.1.16-1.fc42

Fcitx 5 is a generic input method framework released under LGPL-2.1+...

OPENSUSE-SU-2025:15715-1 squid-7.3-1.1 on GA media

These are all security issues fixed in the squid-7.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15719-1 xen-4.20.1_08-1.1 on GA media

These are all security issues fixed in the xen-4.20.108-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15710-1 govulncheck-vulndb-0.0.20251105T184115-1.1 on GA media

These are all security issues fixed in the govulncheck-vulndb-0.0.20251105T184115-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15711-1 opentofu-1.10.7-1.1 on GA media

These are all security issues fixed in the opentofu-1.10.7-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15709-1 google-osconfig-agent-20251028.00-1.1 on GA media

These are all security issues fixed in the google-osconfig-agent-20251028.00-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15706-1 erlang-28.1.1-1.1 on GA media

These are all security issues fixed in the erlang-28.1.1-1.1 package on the GA media of openSUSE Tumbleweed...

Specification-Guided Vulnerability Detection with Large Language Models

Large language models LLMs have achieved remarkable progress in code understanding tasks. However, they demonstrate limited performance in vulnerability detection and struggle to distinguish vulnerable code from patched code. We argue that LLMs lack understanding of security specifications -- the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989196)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989196 advisory. In the Linux kernel, the following vulnerability has been resolved: udmabuf: validate ubuf-pagecount Syzbot has reported GPF in sgallocappendtablefrompages. The...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989863)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989863 advisory. In the Linux kernel, the following vulnerability has been resolved: ftrace: Clean up hash directfunctions on register failures We see the following GPF when...

OPENSUSE-SU-2025:15705-1 runc-1.3.3-1.1 on GA media

These are all security issues fixed in the runc-1.3.3-1.1 package on the GA media of openSUSE Tumbleweed...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988684)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988684 advisory. In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix general protection fault in nilfsbtreeinsert If nilfs2 reads a corrupted disk image a...

CVE-2025-27074

Memory corruption while processing a GP command response...

CVE-2025-27074 Incorrect Calculation of Buffer Size in SCE-Mink

Memory corruption while processing a GP command response...

PT-2025-44923

Name of the Vulnerable Software and Affected Versions SCE-Mink affected versions not specified Description A memory corruption issue exists when processing a GP command response. The root cause is an incorrect calculation of the buffer size. There is no information available regarding the number ...

OPENSUSE-SU-2025:15702-1 kernel-devel-6.17.7-1.1 on GA media

These are all security issues fixed in the kernel-devel-6.17.7-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15701-1 java-1_8_0-openjdk-1.8.0.472-1.1 on GA media

These are all security issues fixed in the java-180-openjdk-1.8.0.472-1.1 package on the GA media of openSUSE Tumbleweed...

kernel: fs: fix UAF/GPF bug in nilfs_mdt_destroy

In the Linux kernel, the following vulnerability has been resolved: fs: fix UAF/GPF bug in nilfsmdtdestroy In allocinode, inodeinitalways could return -ENOMEM if securityinodealloc fails, which causes inode-iprivate uninitialized. Then nilfsismetadatafileinode returns true and nilfsfreeinode...

ALSA-2025:19409 Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipv6: sr: Fix MAC comparison to be constant-time CVE-2025-39702 kernel: fs: fix UAF/GPF bug in nilfsmdtdestroy CVE-2022-50367 kernel: crypto: xts - Handle EBUSY correctly CVE-2023-53494 F...