CLSA-2025-1753298604 Fix CVE(s): CVE-2025-49794, CVE-2025-49796

SECURITY UPDATE: memory vulnerabilities in schematron - debian/patches/CVE-2025-49794CVE-2025-49796.patch: fix memory safety issues in xmlSchematronReportOutput when parsing XPath elements and memory corruption issue triggered by processing sch:name elements in input XML file - CVE-2025-49794 -...

CLSA-2025-1753298447 libxml2: Fix of 2 CVEs

CVE-2025-49794: fix memory safety issues in xmlSchematronReportOutput when parsing XPath elements - CVE-2025-49796: fix memory corruption issue triggered by processing sch:name elements in input XML file...

CVE-2025-46686

creationtimestamp| type| source ---|---|--- 2025-07-23 18:33:18+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114903980298033862 2025-07-23 21:12:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lunwoinpsi2j...

CVE-2025-8069

creationtimestamp| type| source ---|---|--- 2025-07-23 18:29:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lunnm4gsqv2w 2025-07-24 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-646/ 2025-07-24 10:21:06+00:00| seen|...

CVE-2025-46171

creationtimestamp| type| source ---|---|--- 2025-07-23 16:34:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114903514963654205 2025-07-23 18:39:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luno66kqyw27...

CVE-2025-48932

creationtimestamp| type| source ---|---|--- 2025-07-23 10:13:13+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lumruhat6b2v 2025-07-23 14:47:59+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lunb7rep3w2d 2025-07-24 09:30:19+00:00| published-proof-of-concep...

CVE-2025-54442

creationtimestamp| type| source ---|---|--- 2025-07-23 07:51:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lumjwdwqki2t 2025-07-28 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-672/...

CVE-2025-54449

creationtimestamp| type| source ---|---|--- 2025-07-23 07:21:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lumibo2x2q2h 2025-07-28 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-665/...

CVE-2025-43489

creationtimestamp| type| source ---|---|--- 2025-07-23 04:37:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lum73g7h632h...

CVE-2025-8011

creationtimestamp| type| source ---|---|--- 2025-07-23 01:21:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lulu6bzbzu2i 2025-07-23 07:43:00+00:00| seen| https://bsky.app/profile/ransomnews.online/post/3lumjhslkic23 2025-07-24 12:58:37+00:00| seen|...

kernel: ibmvnic: Use kernel helpers for hex dumps

In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Use kernel helpers for hex dumps Previously, when the driver was printing hex dumps, the buffer was cast to an 8 byte long and printed using string formatters. If the buffer size was not a multiple of 8 then a read buffe...

OSV-2025-570 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=433311401 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/java.io.BufferedWriter.write java.base/java.io.Writer.write...

PT-2025-31717 · Git · Checkstyle

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=433311401 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/java.io.BufferedWriter.write java.base/java.io.Writer.write...

PT-2025-33755

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The HID core is susceptible to a shift-out-of-bounds exception when converting a 32-bit quantity to a 0-bit quantity. This can occur due to buggy devices reporting a report field with ...

WordPress ELEX WooCommerce Advanced Bulk Edit Products,Prices&Attributes SQL Injection Vulnerability

WordPress ELEX WooCommerce Advanced Bulk Edit Products,Prices&Attributes is a plugin for bulk editing of WooCommerce product information, prices and attributes with support for Simple, Variant, External and Bundled products. WordPress ELEX WooCommerce Advanced Bulk Edit Products,Prices&Attributes...

SUSE CVE-2025-7394

In the OpenSSL compatibility layer implementation, the function RANDpoll was not behaving as expected and leading to the potential for predictable values returned from RANDbytes after fork is called. This can lead to weak or predictable random numbers generated in applications that are both using...

CVE-2025-51481

creationtimestamp| type| source ---|---|--- 2025-07-22 21:48:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luliaz6au423...

CVE-2025-51459

creationtimestamp| type| source ---|---|--- 2025-07-22 21:11:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lulg6kslm52h 2026-02-20 07:14:31+00:00| seen| https://gist.github.com/YLChen-007/b4869d6d384d6471ec1e67320f40aa41 2026-02-20 09:09:19+00:00| seen|...

CVE-2025-8040

CVE-2025-8040 corresponds to memory-safety bugs in Mozilla Firefox/Thunderbird products (Firefox/Thunderbird 140 line, ESR 140.0 and related versions) with evidence of memory corruption that could potentially lead to arbitrary code execution. Affected components are the Firefox and Thunderbird br...

CVE-2025-51480

creationtimestamp| type| source ---|---|--- 2025-07-22 17:19:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lukz73a5un2j 2025-09-09 20:56:42+00:00| seen| MISP/2bceffac-02c3-4c54-a709-6e253b38ec76 2026-02-27 21:54:39+00:00| seen|...