CVE-2025-40063

In the Linux kernel, the following vulnerability has been resolved: crypto: comp - Use same definition of context alloc and free ops In commit 42d9f6c77479 "crypto: acomp - Move scomp stream allocation code into acomp", the cryptoacompstreams struct was made to rely on having the allocctx and...

UBUNTU-CVE-2025-40063

In the Linux kernel, the following vulnerability has been resolved: crypto: comp - Use same definition of context alloc and free ops In commit 42d9f6c77479 "crypto: acomp - Move scomp stream allocation code into acomp", the cryptoacompstreams struct was made to rely on having the allocctx and...

CVE-2025-40063

The CVE-2025-40063 issue, described in the Linux kernel crypto subsystem, arises from a mismatch in structure layouts between crypto_acomp_streams and scomp_alg caused by alloc_ctx and free_ctx ordering being disrupted by a randomized layout. The fix, implemented in commit 42d9f6c77479 and descri...

CVE-2025-40063 crypto: comp - Use same definition of context alloc and free ops

In the Linux kernel, the following vulnerability has been resolved: crypto: comp - Use same definition of context alloc and free ops In commit 42d9f6c77479 "crypto: acomp - Move scomp stream allocation code into acomp", the cryptoacompstreams struct was made to rely on having the allocctx and...

EUVD-2025-36465

In the Linux kernel, the following vulnerability has been resolved: crypto: comp - Use same definition of context alloc and free ops In commit 42d9f6c77479 "crypto: acomp - Move scomp stream allocation code into acomp", the cryptoacompstreams struct was made to rely on having the allocctx and...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from inconsistent definitions of the allocctx and freectx operations, which could lead to problems with...

CVE-2025-40063: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: crypto: comp - Use same definition of context alloc and free ops In commit 42d9f6c77479 "crypto: acomp - Move scomp stream allocation code into acomp", the cryptoacompstreams struct was made to rely on having the allocctx and...

Open Redirect

Overview com.liferay:com.liferay.layout.admin.web is a portal for Liferay. Affected versions of this package are vulnerable to Open Redirect via the comliferaylayoutadminwebportletGroupPagesPortletredirect parameter in the EditLayoutMVCActionCommand class. Remediation Upgrade...

EUVD-2022-54559

In the Linux kernel, the following vulnerability has been resolved: dm raid: fix accesses beyond end of raid member array On dm-raid table load using raidctr, dm-raid allocates an array rs-devsrs-raiddisks for the raid device members. rs-raiddisks is defined by the number of raid metadata and ima...

Malicious code in cms-layout-server (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-48827 Malicious code in cms-layout-server (npm)

--- -= Per source details. Do not edit below this line.=-...

PT-2025-45967

hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger On^2 growth via consecutive marks during the process of looking back for base glyphs when attaching marks...

Malicious Package

Overview vite-plugin-vue-layout is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

MAL-2025-48310 Malicious code in vite-plugin-vue-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8dd0f0114d51acfaea5223d47aca72111de403cf5dbeb2fbff4b38345041765b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-33732

Malicious code in vite-plugin-vue-layout npm...

Malicious code in vite-plugin-vue-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8dd0f0114d51acfaea5223d47aca72111de403cf5dbeb2fbff4b38345041765b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

thunderbird security update

An update is available for thunderbird. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Thunderbird is a standalone mail and newsgroup client. Security...

EUVD-2025-33610

Malicious code in frontend-layout npm...

Malicious code in frontend-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd81764709c7d0f5174dd0a979519b3c85894302b3df75acedbf1de8500d3c07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48279 Malicious code in frontend-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd81764709c7d0f5174dd0a979519b3c85894302b3df75acedbf1de8500d3c07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...