DEBIAN-CVE-2026-44028

An issue was discovered in Nix before 2.34.7 and Lix before 2.95.2. Unbounded recursion in the NAR Nix Archive parser could lead to a stack-to-heap overflow when the parser is run on a coroutine stack. The stack is allocated without a guard page, which means that a stack overflow could overwrite...

CVE-2026-44029

An issue was discovered in Nix before 2.34.7. Writing to arbitrary files can occur via "nix-prefetch-url --unpack" or "nix store prefetch-file --unpack" directory traversal. The fixed versions are 2.34.7, 2.33.6, 2.32.8, 2.31.5, 2.30.5, 2.29.4, and 2.28.7 introduced in 2.24.7;...

webkitgtk: Use-after-free in AudioSourceProviderGStreamer leading to arbitrary code execution

A use-after-free issue was found in the AudioSourceProviderGStreamer class of WebKitGTK and WPE WebKit in versions prior to 2.30.5. Processing maliciously crafted web content may lead to arbitrary code execution. The highest threat from this vulnerability is to data confidentiality and integrity ...

Faust 代码问题漏洞

Faust Functional Audio Stream is a functional programming language designed for real-time signal processing and synthesis. a null pointer dereference vulnerability exists in the CosPrim::computeSigOutput function in cosprim.hh in Faust 2.30.5 and earlier versions. An attacker could exploit this...

Updated webkit2 packages fix security vulnerabilities

The webkit2 package has been updated to version 2.30.5, fixing several security issues and other bugs...

SUSE SLES15 Security Update : webkit2gtk3 (SUSE-SU-2021:0583-1)

This update for webkit2gtk3 fixes the following issues : Update to version 2.30.5 bsc1182286 : + Bring back the WebKitPluginProcess installation that was removed by mistake. + Fix RunLoop objects leaked in worker threads. + Fix aarch64 llint build with JIT disabled. + Use Internet Explorer quirk...

SUSE-SU-2021:0583-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Update to version 2.30.5 bsc1182286: + Bring back the WebKitPluginProcess installation that was removed by mistake. + Fix RunLoop objects leaked in worker threads. + Fix aarch64 llint build with JIT disabled. + Use Internet Explorer quirk fo...