EUVD-2023-47509

Malicious code in bioql PyPI...

EUVD-2025-28954

Malicious code in bioql PyPI...

EUVD-2025-14811

Malicious code in bioql PyPI...

EUVD-2022-54609

Malicious code in bioql PyPI...

EUVD-2022-54965

Malicious code in bioql PyPI...

EUVD-2025-31897

Malicious code in bioql PyPI...

EUVD-2025-19672

Malicious code in bioql PyPI...

EUVD-2023-25627

Malicious code in bioql PyPI...

EUVD-2022-5738

Malicious code in bioql PyPI...

EUVD-2023-33073

Malicious code in bioql PyPI...

EUVD-2025-5979

Malicious code in bioql PyPI...

EUVD-2024-34242

Malicious code in bioql PyPI...

RLSA-2025:14510 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: netsched: ets: Fix double list add in class with netem as child qdisc CVE-2025-37914 kernel: i40e: fix MMIO write access to an invalid page in i40eclearhw CVE-2025-38200 kernel: ice: fix...

kernel security update

An update is available for kernel. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

CVE-2025-39897

In the Linux kernel, the following vulnerability has been resolved: net: xilinx: axienet: Add error handling for RX metadata pointer retrieval Add proper error checking for dmaenginedescgetmetadataptr which can return an error pointer and lead to potential crashes or undefined behaviour if the...

sched: Fix sched_numa_find_nth_cpu() if mask offline

...

An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599.

...

A heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 (including). It could occur in fdctrl_transfer_handler() in hw/block/fdc.c while processing DMA read data transfers from the floppy drive to the guest system. A privileged guest user could use this flaw to crash the QEMU process on the host resulting in DoS scenario, or potential information leakage from the host memory.

...

PHP-FPM memory access in root process leading to privilege escalation

...

When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an apr_time_exp_t value, potentially revealing the contents of a different static heap value or resulting in program termination, and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input.

...