TI-2025-22678 CVE-2025-31498
c-ares has a use-after-free in read_answers()
Priority LOW 37
c-ares is an asynchronous resolver library.
RHSA-2025:7433
nodejs:22 security update
Released 2025-05-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) nodejs-1:22.15.0-1.module+el9.6.0+23062+9e7801b9.aarch64::nodejs:22, nodejs-1:22.15.0-1.module+el9.6.0+23062+9e7801b9.ppc64le::nodejs:22, nodejs-1:22.15.0-1.module+el9.6.0+23062+9e7801b9.s390x::nodejs:22 +28
Fixes 2 records
TI-2025-02869 CVE-2025-3277 · GHSA-g2ph-wvc2-ph4v
Heap-based buffer overflow in sqlite
Priority LOW 33
An integer overflow can be triggered in SQLite’s `concat_ws()` function.