SUSE CVE-2025-37934

In the Linux kernel, the following vulnerability has been resolved: ASoC: simple-card-utils: Fix pointer check in graphutilparselinkdirection Actually check if the passed pointers are valid, before writing to them. This also fixes a USBAN warning: UBSAN: invalid-load in...

CVE-2025-37934

In the Linux kernel, the following vulnerability has been resolved: ASoC: simple-card-utils: Fix pointer check in graphutilparselinkdirection Actually check if the passed pointers are valid, before writing to them. This also fixes a USBAN warning: UBSAN: invalid-load in...

UBUNTU-CVE-2025-37934

In the Linux kernel, the following vulnerability has been resolved: ASoC: simple-card-utils: Fix pointer check in graphutilparselinkdirection Actually check if the passed pointers are valid, before writing to them. This also fixes a USBAN warning: UBSAN: invalid-load in...

CVE-2025-37934 ASoC: simple-card-utils: Fix pointer check in graph_util_parse_link_direction

In the Linux kernel, the following vulnerability has been resolved: ASoC: simple-card-utils: Fix pointer check in graphutilparselinkdirection Actually check if the passed pointers are valid, before writing to them. This also fixes a USBAN warning: UBSAN: invalid-load in...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from insufficient checking of the graphutilparselinkdirection pointer in simple-card-utils...

CVE-2025-37934: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ASoC: simple-card-utils: Fix pointer check in graphutilparselinkdirection Actually check if the passed pointers are valid, before writing to them. This also fixes a USBAN warning: UBSAN: invalid-load in...

pyaiplayer (>=0.1.2, <=0.1.3), rabbitmq-decorator (>=0.0.0.post3, <=0.0.1) +1 more potentially affected by CVE-2025-47273 via setuptools (65.0.2)

setuptools PYPI version 65.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - pyaiplayer =0.1.2, =0.0.0.post3, =0.0.1 - raise-utils 2.5.0 Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3XXF...

colony-cli (>=1.2.13b0, <=1.3.0b0), cumulusci (>=3.32.0, <=3.32.1) +16 more potentially affected by CVE-2025-47273 via setuptools (54.2.0)

setuptools PYPI version 54.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - colony-cli =1.2.13b0, =3.32.0, =0.1.0, =0.1.0, =0.0.1, =2.0.0.dev4, =0.0.1, =0.0.3, =1.4.0b0, =1.1.3, =0.5.0, =0.5.1 and more Source cves:...

cvexplore (>=0.2.6.0, <=0.2.6.1), meloetta (1.1.0) +4 more potentially affected by CVE-2025-47273 via setuptools (58.0.0)

setuptools PYPI version 58.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - cvexplore =0.2.6.0, =0.0.1, =0.3.1, =1.3.0, =1.6.0 Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3XXF...

pyaiplayer (>=0.1.2, <=0.1.3), rabbitmq-decorator (>=0.0.0.post3, <=0.0.1) +1 more potentially affected by CVE-2025-47273 via setuptools (65.0.2)

setuptools PYPI version 65.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - pyaiplayer =0.1.2, =0.0.0.post3, =0.0.1 - raise-utils 2.5.0 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

colony-cli (>=1.2.13b0, <=1.3.0b0), cumulusci (>=3.32.0, <=3.32.1) +16 more potentially affected by CVE-2025-47273 via setuptools (54.2.0)

setuptools PYPI version 54.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - colony-cli =1.2.13b0, =3.32.0, =0.1.0, =0.1.0, =0.0.1, =2.0.0.dev4, =0.0.1, =0.0.3, =1.4.0b0, =1.1.3, =0.5.0, =0.5.1 and more Source cves:...

aws-data-mesh-utils (>=1.0.4, <=1.0.16), biopal (>=0.3.0rc1, <=0.4.0rc0) +2 more potentially affected by CVE-2025-47273 via setuptools (60.8.2)

setuptools PYPI version 60.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aws-data-mesh-utils =1.0.4, =0.3.0rc1, =1.12.0, =2.0.0, =2.3.2 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

be.bagofwords:bow-utils (>=1.0, <=1.1.15), br.com.anteros:anteros-jsondoc-maven-plugin (1.0.0) +118 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.1.0.release)

org.springframework:spring-context MAVEN version 4.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - be.bagofwords:bow-utils =1.0, =0.7, =1.3.8, =0.0.1, =2.0.17, =0.0.1-release,...

Malicious code in cdpro-redux-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59b127bc162a0536b8fbb2ed7957448cae7028afe71ee85c61504d88f1cf8a36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

RHSA-2025:7672 Red Hat Security Advisory: xdg-utils security update

Bulletin has no description...

Malware in feed-testing-utils

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in ideals-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9dc50c85c983d6fae92067eec047d6e22d93ddd342cca6345a30c7e42c4e37fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3862 Malicious code in ideals-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9dc50c85c983d6fae92067eec047d6e22d93ddd342cca6345a30c7e42c4e37fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Moderate: Red Hat Security Advisory: xdg-utils security update

An update for xdg-utils is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Freeze-Omni 代码问题漏洞

Freeze-Omni is an intelligent low-latency speech dialog model based on Freeze LLM open-sourced by VITA-MLLM. A code issue vulnerability exists in Freeze-Omni 20250421 and earlier versions, which stems from deserialization due to incorrect manipulation of the parameter path in the file...