EUVD-2023-28637

Malicious code in bioql PyPI...

EUVD-2023-12716

Malicious code in bioql PyPI...

EUVD-2025-15977

Malicious code in bioql PyPI...

EUVD-2025-2026

Malicious code in bioql PyPI...

EUVD-2025-17018

Malicious code in bioql PyPI...

EUVD-2022-28307

Malicious code in bioql PyPI...

EUVD-2022-41112

Malicious code in bioql PyPI...

EUVD-2022-50779

Malicious code in bioql PyPI...

EUVD-2025-22814

Malicious code in bioql PyPI...

EUVD-2025-22813

Malicious code in bioql PyPI...

EUVD-2025-31442

Malicious code in bioql PyPI...

EUVD-2022-51003

Malicious code in bioql PyPI...

EUVD-2021-27668

Malicious code in bioql PyPI...

RLSA-2025:11066 Moderate: glibc security update

The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name service cache daemon nscd used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fixes: glibc:...

RLSA-2025:13240 Moderate: glibc security update

The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name service cache daemon nscd used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fixes: glibc:...

libarchive security update

An update is available for libarchive. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libarchive programming library can create and read several different...

GNU Binutils Linker elfcode.h elf_swap_shdr heap-based overflow

...

A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability affects the function __monstartup of the file gmon.c of the component Call Graph Monitor. The manipulation leads to buffer overflow. It is recommended to apply a patch to fix this issue. VDB-220246 is the identifier assigned to this vulnerability. NOTE: The real existence of this vulnerability is still doubted at the moment. The inputs that induce this vulnerability are basically addresses of the running application that is built with gmon enabled. It's basically trusted input or input that needs an actual security flaw to be compromised or controlled.

...

In Samba, GnuTLS gnutls_rnd() can fail and give predictable random values.

...

GNU Bison before 3.5.4 allows attackers to cause a denial of service (application crash). NOTE: there is a risk only if Bison is used with untrusted input, and an observed bug happens to cause unsafe behavior with a specific compiler/architecture. The bug reports were intended to show that a crash may occur in Bison itself, not that a crash may occur in code that is generated by Bison.

...