Security update for libsoup

This update for libsoup fixes the following issues: CVE-2025-2784: Fixed heap buffer over-read in skipinsignificantspace when sniffing content bsc1240750 CVE-2025-32050: Fixed Integer overflow in appendparamquoted bsc1240752 CVE-2025-32052: Fixed heap buffer overflow in sniffunknown bsc1240756...

mtk_iommu_hw_init IOMMU Compromise

The vulnerability of the mtkiommuhwinit function in the drivers/iommu/mtkiommu.c module – Linux’s IOMMU kernel support driver is vulnerable due to the use of the NULL pointer assignment. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

VulnCheck KEV: CVE-2024-57049

Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2025-1331

IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on the system due to the use of unsafe use of the gets function...

CVE-2025-37816 mei: vsc: Fix fortify-panic caused by invalid counted_by() use

In the Linux kernel, the following vulnerability has been resolved: mei: vsc: Fix fortify-panic caused by invalid countedby use gcc 15 honors the countedbylen attribute on vsctppacket.buf and the vsc-tp.c code is using this in a wrong way. len does not contain the available size in the buffer, it...

CVE-2025-41399

When a Stream Control Transmission Protocol SCTP profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-36504

When a BIG-IP HTTP/2 httprouter profile is configured on a virtual server, undisclosed responses can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-41399 SCTP Vulnerability

When a Stream Control Transmission Protocol SCTP profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

org.graylog.plugins:usage-statistics (2.0.0-alpha.5) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.0.0-alpha.5)

org.graylog2:graylog2-server MAVEN version 2.0.0-alpha.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.0-alpha.5 Source cves: CVE-2025-46827 Source advisory:...

org.graylog.plugins:usage-statistics (2.0.0-beta.2) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.0.0-beta.2)

org.graylog2:graylog2-server MAVEN version 2.0.0-beta.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.0-beta.2 Source cves: CVE-2025-46827 Source advisory:...

org.graylog.plugins:graylog-plugin-pipeline-processor (1.1.0), org.graylog.plugins:usage-statistics (2.1.0) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.1.0)

org.graylog2:graylog2-server MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-pipeline-processor 1.1.0 - org.graylog.plugins:usage-statistics 2.1....

org.graylog.plugins:usage-statistics (2.0.0-alpha.4) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.0.0-alpha.4)

org.graylog2:graylog2-server MAVEN version 2.0.0-alpha.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.0-alpha.4 Source cves: CVE-2025-46827 Source advisory:...

org.graylog.plugins:usage-statistics (2.0.0-rc.1) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.0.0-rc.1)

org.graylog2:graylog2-server MAVEN version 2.0.0-rc.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.0-rc.1 Source cves: CVE-2025-46827 Source advisory:...

org.graylog.plugins:usage-statistics (2.1.0-beta.3) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.1.0-beta.3)

org.graylog2:graylog2-server MAVEN version 2.1.0-beta.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.1.0-beta.3 Source cves: CVE-2025-46827 Source advisory:...

org.graylog.plugins:usage-statistics (2.0.0-alpha.3) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.0.0-alpha.3)

org.graylog2:graylog2-server MAVEN version 2.0.0-alpha.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.0-alpha.3 Source cves: CVE-2025-46827 Source advisory:...

org.graylog.plugins:graylog-plugin-parent (2.2.0-alpha.1), org.graylog.plugins:graylog-plugin-web-parent (2.2.0-alpha.1) +1 more potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.2.0-alpha.1)

org.graylog2:graylog2-server MAVEN version 2.2.0-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-parent 2.2.0-alpha.1 -...

org.graylog.plugins:graylog-plugin-pipeline-processor (1.1.1), org.graylog.plugins:usage-statistics (2.1.1) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.1.1)

org.graylog2:graylog2-server MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:graylog-plugin-pipeline-processor 1.1.1 - org.graylog.plugins:usage-statistics 2.1....

org.graylog.plugins:usage-statistics (2.1.3) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.1.3)

org.graylog2:graylog2-server MAVEN version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.1.3 Source cves: CVE-2025-46827 Source advisory:...

org.graylog.plugins:usage-statistics (>=1.0.7, <=1.1.1) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (1.1.0)

org.graylog2:graylog2-server MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics =1.0.7, =1.1.1 Source cves: CVE-2025-46827 Source advisory:...

org.graylog.plugins:usage-statistics (2.0.2) potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.0.2)

org.graylog2:graylog2-server MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - org.graylog.plugins:usage-statistics 2.0.2 Source cves: CVE-2025-46827 Source advisory:...