RLSA-2025:10136 Important: python3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

CVE-2025-59829

Claude Code is an agentic coding tool. Versions below 1.0.120 failed to account for symlinks when checking permission deny rules. If a user explicitly denied Claude Code access to a file and Claude Code had access to a symlink pointing to that file, it was possible for Claude Code to access the...

EUVD-2022-55146

Malicious code in bioql PyPI...

EUVD-2025-25728

Malicious code in bioql PyPI...

EUVD-2023-46596

Malicious code in bioql PyPI...

EUVD-2024-29859

Malicious code in bioql PyPI...

EUVD-2023-31855

Malicious code in bioql PyPI...

EUVD-2025-7061

Malicious code in bioql PyPI...

EUVD-2022-35971

Malicious code in bioql PyPI...

EUVD-2022-31254

Malicious code in bioql PyPI...

EUVD-2023-59397

Malicious code in bioql PyPI...

EUVD-2025-23094

Malicious code in bioql PyPI...

EUVD-2024-54932

Malicious code in bioql PyPI...

EUVD-2022-27730

Malicious code in bioql PyPI...

EUVD-2025-22652

Malicious code in bioql PyPI...

EUVD-2025-19730

Malicious code in bioql PyPI...

EUVD-2024-1965

Malicious code in bioql PyPI...

EUVD-2025-29277

Malicious code in bioql PyPI...

PT-2025-40539

Name of the Vulnerable Software and Affected Versions Claude Code versions prior to 1.0.120 Description An issue existed where Claude Code did not properly handle symlinks when enforcing permission deny rules. Specifically, if a user blocked Claude Code’s access to a file, but Claude Code had...

A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.

...