CVE-2025-55278 HCL DevOps Loop is susceptible to an improper authentication vulnerability

Improper authentication in the API authentication middleware of HCL DevOps Loop allows authentication tokens to be accepted without proper validation of their expiration and cryptographic signature. As a result, an attacker could potentially use expired or tampered tokens to gain unauthorized...

Infinite loop

Overview Affected versions of this package are vulnerable to Infinite loop via the applysubstitution function in the bsdtar when used with -s pathname-rewrite rules. An attacker can cause excessive memory allocation leading to application crash by supplying malicious input such as an empty patter...

Security update for openjpeg

This update for openjpeg fixes the following issues: CVE-2023-39327: Fixed that malicious files can cause a large loop that continuously prints warning messages on the terminal bsc1227410. Other bug fixes: Ensure no bundled libraries are used bsc1250467. Patch Instructions: To install this SUSE...

SUSE-SU-2025:3946-1 Security update for openjpeg

This update for openjpeg fixes the following issues: - CVE-2023-39327: Fixed that malicious files can cause a large loop that continuously prints warning messages on the terminal bsc1227410. Other bug fixes: - Ensure no bundled libraries are used bsc1250467...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989786)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989786 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: fix dereference of stale list iterator after loop body The list iterator variable will be a...

PT-2025-45165

Name of the Vulnerable Software and Affected Versions HCL DevOps Loop affected versions not specified Description The API authentication middleware in HCL DevOps Loop does not properly validate authentication tokens, specifically regarding their expiration and cryptographic signature. This could...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988798)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988798 advisory. In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix UAF when detecting digest errors We should also bail from the iowork loop when we s...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989053)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989053 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: quota: fix loop condition at f2fsquotasync cnt should be passed to sbhasquotaactive instead...

HCL DevOps Loop 安全漏洞

HCL DevOps Loop is a suite of code development platforms from HCL India. A security vulnerability exists in HCL DevOps Loop that stems from the API authentication middleware not properly validating token expiration times and cryptographic signatures, which could lead to the use of expired or...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989380)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989380 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: add error checking to ext4extreplaysetiblocks If the call to ext4mapblocks fails due to an...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990099)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990099 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - fix infinite loop on requests not multiple of WORDSZ The commit referenced in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989728)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989728 advisory. In the Linux kernel, the following vulnerability has been resolved: net: dsa: Fix possible memory leaks in dsaloopinit kmemleak reported memory leaks in dsaloopinit:...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989467)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989467 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI: pciehp: Fix infinite loop in IRQ handler upon power fault The Power Fault Detected bit in th...

Unchecked Input For Loop Condition

com.liferay.portal, com.liferay.portal.impl is vulnerable to unchecked input for loop condition. The vulnerability is due to improper validation of input data in XML-RPC requests, which allows an attacker to perform a denial-of-service DoS attack by sending a crafted XML-RPC request...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: netlink: avoided infinite retry loops in netlinkunicast The netlinkattachskb function checks the read memory allocation constraints of the socket. First, it checks whether the newly increased rmem value fits within the socket’...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: nvme-tcp: sanitize request list handling Validating the request in nvmetcphandler2t to ensure it is not part of any list; otherwise, a malicious R2T PDU might introduce a loop into the request list processing...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: The loop device’s block size should not be updated under exclusive control of the device owner. Syzbot introduced a scenario where the block size of a loop device was changed within a mounted file system. This caused a mismatch...

Astra Linux – Vulnerability in Cairo

A issue was discovered in cairo 1.16.0. There is an infinite loop in the function arcerrornormalized in the file cairo-arc.c, which is related to arcmaxanglefortolerancenormalized...

Astra Linux – Vulnerability in Python 3.11

There is a defect in the CPython “tarfile” module that affects the “TarFile” extraction and entry enumeration APIs. The tar implementation processes tar archives with negative offsets without errors, which can lead to an infinite loop and deadlock during the parsing of maliciously crafted tar...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: exfat: Added a check for the cluster chain loop in dir functions. An infinite loop may occur if the following conditions occur due to file system corruption: 1 Condition for exfatcountdirEntries to loop infinitely: - The clust...