CVE-2025-60876

BusyBox wget versions up to and including 1.37.0 are vulnerable to an HTTP header-injection vulnerability. The root cause is that the utility copies the URL path and query into the HTTP request line verbatim without proper validation. If a URL contains raw CR (0x0D) , LF (0x0A) , or other C0 cont...

bpf: Prevent bpf program recursion for raw tracepoint probes

...

osbuild-composer security update

132.2-3.0.1 - Switch to UEKR8 repositories for OL9.6 Orabug: 37962207 - Add support to create OpenScap images JIRA: OLDIS-35301 - Simplify repository names JIRA: OLDIS-35893 - Refactor patches to fix some naming and set a correct kernel for Oracle Linux Orabug: 37253643 - Support using OCI...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990132)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990132 advisory. In the Linux kernel, the following vulnerability has been resolved: dropmonitor: replace spinlock by rawspinlock tracedropcommon is called with preemption disabled,...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989528)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989528 advisory. In the Linux kernel, the following vulnerability has been resolved: kcsan: Turn reportfilterlistlock into a rawspinlock Ran Xiaokai reports that with a KCSAN-enabled...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989934)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989934 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Fix sleeping function called from invalid context on RT kernel When setting...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-990036)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990036 advisory. In the Linux kernel, the following vulnerability has been resolved: iio: health: afe4403: Fix oob read in afe4403readraw KASAN report out-of-bounds read as follows:...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989501)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989501 advisory. In the Linux kernel, the following vulnerability has been resolved: raw: Fix a data-race around sysctlrawl3mdevaccept. While reading sysctlrawl3mdevaccept, it can be...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-988813)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988813 advisory. In the Linux kernel, the following vulnerability has been resolved: can: afcan: fix NULL pointer dereference in canrxregister It causes NULL pointer dereference when...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: HID: core: do not bypass hidhwrawrequest hidhwrawrequest is actually useful for ensuring that the provided buffer and length are valid. Directly calling it in the low-level transport driver bypassed these checks and allowed the u...

GO-2025-4049 OpenBao leaks HTTPRawBody in Audit Logs in github.com/openbao/openbao

OpenBao leaks HTTPRawBody in Audit Logs in github.com/openbao/openbao...

Linux drm_edid_raw DoS

The vulnerability of the drmedidraw function in the Linux operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Linux hid_hw_raw_request DoS

The vulnerability of the hidhwrawrequest function in the Linux operating system’s low-level transport driver is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Important: kernel-livepatch-4.14.355-280.664

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Use rawsmpprocessorid instead of smpprocessorid CVE-2023-53530 Affected Packages: kernel-livepatch-4.14.355-280.664 Issue Correction: Please ensure you have live patching enabled. Run yum update...

Important: kernel-livepatch-5.10.244-240.970

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: netdevsim: fix memory leak in nsimdrvprobe when nsimdevresourcesregister failed CVE-2022-50500 In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Use rawsmpprocessorid instead of...

Important: kernel-livepatch-5.10.240-238.966

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: netdevsim: fix memory leak in nsimdrvprobe when nsimdevresourcesregister failed CVE-2022-50500 In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Use rawsmpprocessorid instead of...

Oracle Business Intelligence Enterprise Edition (OAS 7.6) (October 2025 CPU)

The version of Oracle Business Intelligence Enterprise Edition OAS 7.6.0.0.0 installed on the remote host is affected by multiple vulnerabilities as referenced in the October 2025 CPU advisory. - Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics...

Oracle Business Intelligence Enterprise Edition (OAS 8.2) (October 2025 CPU)

The version of Oracle Business Intelligence Enterprise Edition OAS 8.2.0.0.0 installed on the remote host is affected by multiple vulnerabilities as referenced in the October 2025 CPU advisory. - Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics...

CVE-2025-62705

A flaw was found in OpenBao. The audit log does not properly redact sensitive fields when relevant subsystems return byte response parameters instead of strings. This includes, but is not limited to, sys/raw with use of encoding=base64, causing all data to be emitted unredacted to the audit log,...

CVE-2025-62705

OpenBao is an open source identity-based secrets management system. Prior to version 2.4.2, OpenBao's audit log did not appropriately redact fields when relevant subsystems sent byte response parameters rather than strings. This includes, but is not limited to sys/raw with use of encoding=base64,...