5514 matches found
[SECURITY] Fedora 41 Update: nodejs20-20.19.1-1.fc41
Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network applications. \ Node.js uses an event-driven, non-blocking I/O model that \ makes it lightweight and efficient, perfect for data-intensive \ real-time applications that run across distributed...
This Week in Spring - May 6th, 2025
Hi, Spring fans! As I write this, I'm winging my way to lovely London, UK, for the amazing Devoxx UK event! I'll be looking at the wide and wonderful world of Springdom. Then, from there, it's off to Code Remix in Miami. I'll also be speaking at the Tampa JUG while I'm there, so look out! After...
CVE-2024-9676 affecting package cri-o for versions less than 1.22.3-14
CVE-2024-9676 affecting package cri-o for versions less than 1.22.3-14. A patched version of the package is available...
CVE-2023-53111 loop: Fix use-after-free issues
In the Linux kernel, the following vulnerability has been resolved: loop: Fix use-after-free issues doreqfilebacked calls blkmqcompleterequest synchronously or asynchronously when using asynchronous I/O unless memory allocation fails. Hence, modify loophandlecmd such that it does not dereference...
PT-2025-18484 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability has been resolved in the Linux kernel. The issue is related to the 9p protocol and file descriptor handling. Specifically, when the file descriptor refers to a pipe, th...
Security Bulletin: Red Hat OpenShift on IBM Cloud is affected by a cri-o security vulnerability (CVE-2024-9676)
Summary Red Hat OpenShift on IBM Cloud is affected by a security vulnerability found in the cri-o component which a remote authenticated attacker could exploit to cause a denial of service condition. CVE-2024-9676 Vulnerability Details CVEID: CVE-2024-9676 Description: Podman, Buildah and CRI-O a...
Security Bulletin: Red Hat OpenShift on IBM Cloud is affected by a cri-o security vulnerability (CVE-2024-5154)
Summary Red Hat OpenShift on IBM Cloud is affected by a security vulnerability found in the cri-o component which could allow an attacker to send a specially crafted URL request containing "dot dot" sequences /../ to read and write arbitrary files on the system. Vulnerability Details CVEID:...
CVE-2025-21613 affecting package cri-o for versions less than 1.22.3-12
CVE-2025-21613 affecting package cri-o for versions less than 1.22.3-12. A patched version of the package is available...
CVE-2023-49568 affecting package cri-o for versions less than 1.22.3-12
CVE-2023-49568 affecting package cri-o for versions less than 1.22.3-12. A patched version of the package is available...
CVE-2023-49569 affecting package cri-o for versions less than 1.22.3-12
CVE-2023-49569 affecting package cri-o for versions less than 1.22.3-12. A patched version of the package is available...
AZL-61812 CVE-2025-22872 affecting package cri-o 1.30.1-1
The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...
CVE-2022-43590
A null pointer dereference vulnerability exists in the handleioctl0x830a0systembuffer functionality of Callback technologies CBFS Filter 20.0.8317. A specially crafted I/O request packet IRP can lead to denial of service. An attacker can issue an ioctl to trigger this vulnerability...
CVE-2022-43589
A null pointer dereference vulnerability exists in the handleioctl8314C functionality of Callback technologies CBFS Filter 20.0.8317. A specially crafted I/O request packet IRP can lead to denial of service. An attacker can issue an ioctl to trigger this vulnerability...
CVE-2022-43588
A null pointer dereference vulnerability exists in the handleioctl83150 functionality of Callback technologies CBFS Filter 20.0.8317. A specially crafted I/O request packet IRP can lead to denial of service. An attacker can issue an ioctl to trigger this vulnerability...
This Week in Spring - April 15th, 2025
Spring AI M7 is here! This new release includes a bunch of awesome new features! And some refactorings. Notably that the Spring AI auto-configuration has changed from a single monolithic artifact to individual auto-configuration artifacts per model, vector store, and other components. This change...
CVE-2025-21614 affecting package cri-o for versions less than 1.22.3-13
CVE-2025-21614 affecting package cri-o for versions less than 1.22.3-13. A patched version of the package is available...
ibmvnic: Don't reference skb after sending to VIOS
...
The vulnerability of the bfd_mach_o_get_synthetic_symtab() function in the bfd/mach-o.c component of the GNU Binutils development environment allows a attacker to cause a service failure.
The vulnerability of the bfdmachogetsyntheticsymtab function in the bfd/mach-o.c component of the GNU Binutils development environment is related to errors during variable initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...
