ALSA-2025:10635 Moderate: gnome-remote-desktop security update

GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment. Security Fixes: gnome-remote-desktop: Uncontrolled Resource Consumption due to Malformed RDP PDUs CVE-2025-5024 For more details about the security issues, including the impact, a CVSS score,...

ALSA-2025:10631 Moderate: gnome-remote-desktop security update

GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment. Security Fixes: gnome-remote-desktop: Uncontrolled Resource Consumption due to Malformed RDP PDUs CVE-2025-5024 For more details about the security issues, including the impact, a CVSS score,...

RHEL 9 : gnome-remote-desktop (RHSA-2025:10631)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:10631 advisory. GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment. Security Fixes: gnome-remote-desktop:...

K000152046: GNOME GLib vulnerability CVE-2024-52533

Security Advisory Description gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4CONNMSGLEN is not sufficient for a trailing '\0' character. CVE-2024-52533 Impact There is no impact; F5 products are not affected by this vulnerabilit...

gnome-remote-desktop: freerdp: Unauthenticated RDP Packet Causes Segfault in FreeRDP Leading to Denial of Service

A flaw was found in the FreeRDP used by Anaconda's remote install feature, where a crafted RDP packet could trigger a segmentation fault. This issue causes the service to crash and remain defunct, resulting in a denial of service. It occurs pre-boot and is likely due to a NULL pointer dereference...

FreeBSD : Yelp -- arbitrary file read (9449f018-84a3-490d-959f-38c05fbc77a7)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 9449f018-84a3-490d-959f-38c05fbc77a7 advisory. [email protected] reports: A flaw was found in Yelp. The Gnome user help application allows the help...

The vulnerability of the soup_multipart_new_from_message() function in the libsoup library, a graphical interface library for GNOME, allows a attacker to cause a service failure.

The vulnerability of the soupmultipartnewfrommessage function in the GNOME graphical interface library libsoup is related to the possibility of integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures...

FreeBSD : Yelp -- arbitrary file read (0e200a73-289a-489e-b405-40b997911036)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 0e200a73-289a-489e-b405-40b997911036 advisory. [email protected] reports: A flaw was found in Yelp. The Gnome user help application allows the help...

The vulnerability of the sorting_key_copy function in the structured file library of The GNOME Project’s libgsf library, which allows an attacker to compromise the confidentiality of protected information.

The vulnerability of the sortingkeycopy function in the structured file library of The GNOME Project’s libgsf is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of the protected information...

The vulnerability of the gsf_base64_encode_simple function in the structured files library. The GNOME Project’s libgsf allows attackers to compromise the confidentiality of protected information.

The vulnerability of the gsfbase64encodesimple function in the structured file library: The GNOME Project’s libgsf relies on the use of uninitialized variables. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of the protected information...

The vulnerability in the WebSocket protocol implementation of the libsoup graphical interface library for GNOME allows a attacker to cause a service failure.

The vulnerability of the WebSocket protocol implementation in the GNOME graphical interface library libsoup is related to pointer dereferencing errors. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending a specially crafted POST request...

The vulnerability of the HTTP digest-authentication mechanism used by the GNOME graphical interface library libsoup, which allows a attacker to trigger a service denial-of-service attack.

The vulnerability of the HTTP digest-authentication mechanism used by the GNOME graphical interface library libsoup is related to pointer dereferencing errors. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending a specially crafted POST request...

SUSE-SU-2025:02004-1 Security update for gdm

This update for gdm fixes the following issues: - CVE-2025-6018: Removes pamenv from auth stack for security reason bsc1243226...

libsoup: Integer Underflow in soup_multipart_new_from_message() Leading to Denial of Service in libsoup

A flaw was found in the soupmultipartnewfrommessage function of the libsoup HTTP library, which is commonly used by GNOME and other applications to handle web communications. The issue occurs when the library processes specially crafted multipart messages. Due to improper validation, an internal...

Astra Linux – Vulnerability in Yelp

A flaw was discovered in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability enables malicious users to input help documents, which may result in the exfiltration of user files to an external environment...

TencentOS Server 4: mingw-glib2 (TSSA-2024:0993)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0993 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

libxml2 安全漏洞

libxml2 is a GNOME open source library for parsing XML documents. It is written in C and can be called by many languages, such as C, C++, and XSH. A security vulnerability exists in libxml2, which stems from incorrectly checking the size of input, and may cause the program to crash...

TencentOS Server 3: pango (TSSA-2022:0081)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2022:0081 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

TencentOS Server 3: gnome-shell (TSSA-2024:0394)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0394 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

TencentOS Server 4: gnome-shell (TSSA-2025:0130)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0130 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...