Collected every two hours from specialised publications — each link leads to the original article.
January CPU 2025
GStreamer has an OOB-write in isomp4/qtdemux.c. (CVE-2024-47537) GStreamer has a stack-buffer overflow in vorbis_handle_identification_packet. (CVE-2024-47538)…
GNU C Library could be made to crash or run programs if it received specially crafted input.
An update that fixes 5 vulnerabilities is now available.
* bsc#1236136 Cross-References: * CVE-2024-13176
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Fix for CVE-2025-0781
Fix for CVE-2025-0781
January CPU 2025
January CPU 2025
January CPU 2025
January CPU 2025
An issue was discovered in Django 4.2 before 4.2.14 and 5.0 before 5.0.7. urlize and urlizetrunc were subject to a potential denial of service attack via certa…
Segmentation fault in win_line() in Vim
Use after free in DevTools. (CVE-2025-0762) References: - https://bugs.mageia.org/show_bug.cgi?id=33974 - https://chromereleases.googleblog.com/2025/01/stable-…
Many records in the additional section cause CPU exhaustion. (CVE-2024-11187) DNS-over-HTTPS implementation suffers from multiple issues under heavy query load…
OpenJDK 23 could be made to expose sensitive information over the network.
OpenJDK 21 could be made to expose sensitive information over the network.
OpenJDK 17 could be made to expose sensitive information over the network.
OpenJDK 11 could be made to expose sensitive information over the network.
USN-7096-1 caused some minor regressions in OpenJDK 8.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, cit…
Rebuilt against golang-x-net 0.33.0 for CVE-2024-45338
This release contains a number of small improvements and bugfixes, including mitigations for the LOW severity vulnerability CVE-2025-24356. Bugfixes Add mitiga…