37197 matches found
kernel: afs: Fix merge preference rule failure condition
In the Linux kernel, the following vulnerability has been resolved: afs: Fix merge preference rule failure condition syzbot reported a lock held when returning to userspace1. This is because if argc is less than 0 and the function returns directly, the held inode lock is not released. Fix this by...
kernel: intel_th: Fix a resource leak in an error handling path
In the Linux kernel, the following vulnerability has been resolved: intelth: Fix a resource leak in an error handling path If an error occurs after calling 'pciallocirqvectors', 'pcifreeirqvectors' must be called as already done in the remove function...
kernel: nfsd: release svc_expkey/svc_export with rcu_work
In the Linux kernel, the following vulnerability has been resolved: nfsd: release svcexpkey/svcexport with rcuwork The last reference for cachehead can be reduced to zero in cshow and eshowusing rcureadlock and rcureadunlock. Consequently, svcexportput and expkeyput will be invoked, leading to tw...
kernel: nfsd: clear acl_access/acl_default after releasing them
In the Linux kernel, the following vulnerability has been resolved: nfsd: clear aclaccess/acldefault after releasing them If getting acldefault fails, aclaccess and acldefault will be released simultaneously. However, aclaccess will still retain a pointer pointing to the released posixacl, which...
kernel: net: phy: mscc: Fix memory leak when using one step timestamping
In the Linux kernel, the following vulnerability has been resolved: net: phy: mscc: Fix memory leak when using one step timestamping Fix memory leak when running one-step timestamping. When running one-step sync timestamping, the HW is configured to insert the TX time into the frame, so there is ...
MAL-2025-112231 Malicious code in racial_turtle_azure-88 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c1f16bc7a7baf79284744d7e22af19925bc788679de13b8dfb14f83e5c77cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-77619
Malicious code in flexiblebadgerteal-84 npm...
MAL-2025-99077 Malicious code in accepted_otter_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e164894e903d99d9c50830cf30653d29ec0f82bf377042bebf9cd0227dc607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rudi-klipo8-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a86e4a392c583a87cfb1206fa54c57aab2eb8ca9fec616d7219a40823f76c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nurul-tomat40-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ddcddabc2fb63987d9e9a9464ca2911030758676c7c9b60c90e326bf1e9ca1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Mozilla Firefox和Mozilla Firefox ESR 安全漏洞
Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A code execution vulnerability exists in Mozilla Firefox and Firefox ESR due to a race condition in the Graphics component that can be exploited by an attacker to execute...
java-1.8.0-openjdk security update
1.8.0.472.b08-1.0.1 - Update to 8u472-b08 GA Orabug: 38571645 - Update release notes for 8u472-b08. - Drop local JDK-8339414 fix as this is now included upstream - Reset rpmrelease to 1 now there are no other RPM builds on RHEL 8 - Sync the copy of the portable specfile with the latest update -...
Moderate: open-vm-tools bug fix and enhancement update
For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section...
Fedora 43 : dotnet8.0 (2025-9171c95e17)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-9171c95e17 advisory. This is the October 2025 release of .NET 8. Release Notes: - SDK: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.21/8.0.121.md - Runtime:...
Mozilla Firefox和Mozilla Firefox ESR 安全漏洞
Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A code execution vulnerability exists in Mozilla Firefox and Firefox ESR, which stems from a post-release reuse issue in the Audio/Video component, and can be exploited by an...
Microsoft Excel 信息泄露漏洞
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. An information leakage vulnerability exists in Microsoft Excel, which is caused due to improper authorization validation. An attacker could exploit the vulnerability to obtain sensitive information...
Mozilla Firefox和Mozilla Firefox ESR 安全漏洞
Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A code execution vulnerability exists in Mozilla Firefox and Firefox ESR, which is caused by a WebRTC Audio/Video component reuse after release issue, and can be exploited by a...
Fedora 42 : dotnet8.0 (2025-f74de9283d)
The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-f74de9283d advisory. This is the October 2025 release of .NET 8. Release Notes: - SDK: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.21/8.0.121.md - Runtime:...
ALSA-2025:20181 Important: pam security update
Pluggable Authentication Modules PAM provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security Fixes: linux-pam: Linux-pam directory Traversal CVE-2025-6020 For more details about the security issues, including the impact, a CVSS...
