Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:18:31 +0000 bdu:2025-12888 https://cve.radiocsirt.org/vuln/bdu:2025-12888 bdu:2025-12888 https://cve.radiocsirt.org/vuln/bdu:2025-12888 EUVD-2026-331298 https://cve.radiocsirt.org/vuln/euvd-2026-331298 EUVD-2026-331298 https://cve.radiocsirt.org/vuln/euvd-2026-331298 fkie_cve-2025-3416 https://cve.radiocsirt.org/vuln/fkie_cve-2025-3416 <p>A flaw was found in OpenSSL&#39;s handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.</p> <p>A flaw was found in OpenSSL&#39;s handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-3416 GHSA-mgh2-hf68-73c8 https://cve.radiocsirt.org/vuln/ghsa-mgh2-hf68-73c8 <p>A flaw was found in OpenSSL&#39;s handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.</p> <p>A flaw was found in OpenSSL&#39;s handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.</p> https://cve.radiocsirt.org/vuln/ghsa-mgh2-hf68-73c8 msrc_CVE-2025-3416 — Rust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch` https://cve.radiocsirt.org/vuln/msrc_cve-2025-3416 msrc_CVE-2025-3416 https://cve.radiocsirt.org/vuln/msrc_cve-2025-3416 OESA-2026-2944 — rpm-ostree security update https://cve.radiocsirt.org/vuln/oesa-2026-2944 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: rpm-ostree</p> <p>rpm-ostree is a hybrid image/package system. It supports &amp;amp;quot;composing&amp;amp;quot; packages on a build server into an OSTree repository, which can then be replicated by client systems with atomic upgrades. Additionally, unlike many &amp;amp;quot;pure&amp;amp;quot; image systems, with rpm-ostree each client system can layer on additional packages, providing a &amp;amp;quot;best of both worlds&amp;amp;quot; approach. Security Fix(es):</p> <p>The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host.(CVE-2023-53159)</p> <p>Improper Validation of Unsafe Equivalence in punycode by the idna crate from Servo rust-url allows an attacker to create a punycode hostname that one part of a system might treat as distinct while another part of that system would treat as equivalent to another hostname.(CVE-2024-12224)</p> <p>A flaw was found in OpenSSL&amp;apos;s handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.(CVE-2025-3416)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: rpm-ostree</p> <p>rpm-ostree is a hybrid image/package system. It supports &amp;amp;quot;composing&amp;amp;quot; packages on a build server into an OSTree repository, which can then be replicated by client systems with atomic upgrades. Additionally, unlike many &amp;amp;quot;pure&amp;amp;quot; image systems, with rpm-ostree each client system can layer on additional packages, providing a &amp;amp;quot;best of both worlds&amp;amp;quot; approach. Security Fix(es):</p> <p>The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host.(CVE-2023-53159)</p> <p>Improper Validation of Unsafe Equivalence in punycode by the idna crate from Servo rust-url allows an attacker to create a punycode hostname that one part of a system might treat as distinct while another part of that system would treat as equivalent to another hostname.(CVE-2024-12224)</p> <p>A flaw was found in OpenSSL&amp;apos;s handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.(CVE-2025-3416)</p> https://cve.radiocsirt.org/vuln/oesa-2026-2944 openSUSE-SU-2025:0152-1 — Security update for kanidm https://cve.radiocsirt.org/vuln/opensuse-su-2025:0152-1 <p>Security update for kanidm</p> <p>Security update for kanidm</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:0152-1 SUSE-SU-2025:01591-1 — Security update for python-maturin https://cve.radiocsirt.org/vuln/suse-su-2025:01591-1 <p>Security update for python-maturin</p> <p>Security update for python-maturin</p> https://cve.radiocsirt.org/vuln/suse-su-2025:01591-1 UBUNTU-CVE-2025-3416 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-3416 <p><strong>Affected:</strong> Ubuntu:Pro:24.04:LTS: rust-openssl</p> <p>A flaw was found in OpenSSL&#39;s handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.</p> <p><strong>Affected:</strong> Ubuntu:Pro:24.04:LTS: rust-openssl</p> <p>A flaw was found in OpenSSL&#39;s handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-3416