Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this update as...

The vulnerability of the in_atomic core function in the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the inatomic kernel function in the Linux operating system is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the NFSv4 component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the NFSv4 component in the Linux operating system is related to incorrect resource locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

Vulnerability of the set_wm_ranges() function in the drivers/gpu/drm/amd/display/dc/dcn301/dcn301_resource.c file – This function is part of the driver support for Direct Rendering Infrastructure (DRI) of AMD graphics cards in Linux operating systems. It can be exploited by attackers to cause service failures.

Vulnerability of the setwmranges function in the drivers/gpu/drm/amd/display/dc/dcn301/dcn301resource.c file – The drivers for AMD graphics cards that support Direct Rendering Infrastructure DRI in Linux operating systems are vulnerable due to improper control of resource identifiers “resource...

Vulnerability of the iwl_uefi_reduce_powerSection() function in the drivers/net/wireless/intel/iwlwifi/fw/uefi.c module – A driver for supporting Intel wireless connection adapters in Linux operating systems, which allows a hacker to cause a service failure

Vulnerability of the iwluefireducepowerSection function in the drivers/net/wireless/intel/iwlwifi/fw/uefi.c module – The driver for Intel wireless connection adapters in Linux operating systems is vulnerable to errors in its code. Exploiting this vulnerability could allow an attacker to cause a...

Voyager 安全漏洞

Voyager is an application by David Borland Personal Developer. A security vulnerability exists in Voyager versions 1.4.0 through 1.8.0 that originates from an authenticated administrator being able to execute arbitrary OS commands via specific php artisan commands...

The vulnerability of the SCSI component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the SCSI component in the Linux operating system is related to incorrect blocking of resources in the cqthreadv3hw function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Internet Key Exchange version 2 module in Cisco IOS XR operating systems allows a hacker to trigger a service failure.

The vulnerability of the Internet Key Exchange version 2 IKEv2 module in Cisco IOS XR operating systems is related to the use of incorrect authentication tokens due to unlimited resource allocation. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the Xen kernel component in the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the xen component in the Linux operating system’s kernel is related to a memory leak in the xenbusdevprobe function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the DRM/Radeon kernel components in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of DRM/Radeon kernel components in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow a hacker to cause service failures...

The vulnerability in browser extensions for Safari on operating systems macOS, iOS, iPadOS, and visionOS allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Safari browser extensions on macOS, iOS, iPadOS, and VisionOS operating systems is related to improper storage of permissions. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the PAN-OS operating system, related to insufficient checking of unusual or exceptional states, allows a perpetrator to trigger a service failure by sending a continuous stream of specially created LLDP packets.

The vulnerability of the PAN-OS operating system is related to insufficient checks for unusual or exceptional states. Exploiting this vulnerability could allow a perpetrator to cause a service failure by sending a continuous stream of specially created LLDP packets...

The vulnerability of the fs component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the fs component in the Linux operating system’s kernel is related to the use of an uninitialized resource in the ocfs2setattr function. Exploiting this vulnerability could allow a attacker to cause a service failure...

CVE-2025-2814

Crypt::CBC versions between 1.21 and 3.05 for Perl may use the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. This issue affects operating systems where "/dev/urandom'" is unavailable. In that case, Crypt::CBC will fallback to...

CVE-2025-2814 Crypt::CBC versions between 1.21 and 3.05 for Perl may use insecure rand() function for cryptographic functions

Crypt::CBC versions between 1.21 and 3.05 for Perl may use the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. This issue affects operating systems where "/dev/urandom'" is unavailable. In that case, Crypt::CBC will fallback to...

CVE-2025-2814 Crypt::CBC versions between 1.21 and 3.05 for Perl may use insecure rand() function for cryptographic functions

Crypt::CBC versions between 1.21 and 3.05 for Perl may use the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. This issue affects operating systems where "/dev/urandom'" is unavailable. In that case, Crypt::CBC will fallback to...

CVE-2025-2814

CVE-2025-2814 affects Crypt::CBC for Perl versions 1.21–3.05, which may use the non-cryptographically secure rand() as the entropy source when /dev/urandom is unavailable. Several advisories confirm the issue and report a fix that sources randomness via Crypt::URandom instead of falling back to r...

Updated graphicsmagick packages fix security vulnerabilities

ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits. CVE-2025-27795...

Advisory ROSA-SA-2025-2843

Software: gmp 6.1.2 OS: ROSA Virtualization 2.1 packageevrstring: gmp-6.1.2-11.rv3 CVE-ID: CVE-2021-43618 BDU-ID: 2022-05776 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the mpz/inpraw.c component of the GMP arithmetic operations library on 32-bit platforms is related to integer overflow...

Advisory ROSA-SA-2025-2845

Software: harfbuzz 1.7.5 OS: ROSA Virtualization 2.1 packageevrstring: harfbuzz-1.7.5-4.rv3 CVE-ID: CVE-2023-25193 BDU-ID: 2023-06149 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the hb-ot-layout-gsubgpos.hh component of the Harfbuzz text conversion library is associated with unrestricted resourc...