4954 matches found
thunderbird: firefox: Cross-process information leaked due to malicious IPC messages
A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A compromised web process using malicious IPC messages could have caused the privileged browser process to reveal blocks of its memory to the compromised process...
thunderbird: firefox: Some non-writable Object properties could be modified
A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: There was a way to change the value of JavaScript Object properties that were supposed to be non-writeable...
[SECURITY] Fedora 43 Update: rust-regex-automata-0.4.13-1.fc43
Automata construction and matching using regular expressions...
[SECURITY] Fedora 43 Update: python-pydantic-2.12.4-1.fc43
Data validation and settings management using python type hinting...
bind security update
9.16.23-31.0.1 - Fix warning when changing device file permissions Orabug: 36518580 32:9.16.23-31.2 - Replace downstream fixes with upstream changes 32:9.16.23-31.1 - Prevent cache poisoning due to weak PRNG CVE-2025-40780 - Address various spoofing attacks CVE-2025-40778...
SUSE CVE-2016-11082
An issue was discovered in Mattermost Server before 2.2.0. It allows XSS via a crafted link...
CVE-2025-64329 vulnerabilities
Vulnerabilities for packages: tekton-pipelines, flux-source-controller, skaffold, steampipe, cluster-api-helm-controller, k9s-fips, trivy-operator-fips, cloudbeat-fips, xeol, skaffold-fips, helm-operator, gitlab-operator, tw, gogatekeeper, gatekeeper, beats, fuse-overlayfs-snapshotter, osv-scanne...
GHSA-M6HQ-P25P-FFR2 vulnerabilities
Vulnerabilities for packages: tekton-pipelines, flux-source-controller, skaffold, steampipe, cluster-api-helm-controller, k9s-fips, trivy-operator-fips, cloudbeat-fips, xeol, skaffold-fips, helm-operator, gitlab-operator, tw, gogatekeeper, gatekeeper, beats, fuse-overlayfs-snapshotter, osv-scanne...
CVE-2025-31133 vulnerabilities
Vulnerabilities for packages: podman, k3s, grafana-alloy, node-feature-discovery, falco-no-driver, sriov-network-device-plugin, nvidia-container-toolkit, kubernetes, buildah...
GHSA-QW9X-CQR3-WC7R vulnerabilities
Vulnerabilities for packages: podman, k3s, grafana-alloy, node-feature-discovery, falco-no-driver, sriov-network-device-plugin, nvidia-container-toolkit, kubernetes, buildah...
runc security update
4:1.2.5-3 - Add relevant patches to CVEs - Resolves: RHEL-122402 4:1.2.5-2 - fix CVE-2025-31133 CVE-2025-52565 CVE-2025-52881 - Resolves: RHEL-122402 - Resolves: RHEL-122404 - Resolves: RHEL-122415 4:1.2.5-1 - update to https://github.com/opencontainers/runc/releases/tag/v1.2.5 - Related: RHEL-60...
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling...
CVE-2025-12060 affecting package keras for versions less than 3.3.3-5
CVE-2025-12060 affecting package keras for versions less than 3.3.3-5. A patched version of the package is available...
[SECURITY] Fedora 42 Update: qt5-qttranslations-5.15.18-1.fc42
Qt5 - QtTranslations module...
[SECURITY] Fedora 42 Update: fcitx-qt5-1.2.6-30.fc42
This package provides Fcitx Qt5 input context...
CVE-2025-60753
An issue was discovered in libarchive bsdtar before version 3.8.1 in function applysubstitution in file tar/subst.c when processing crafted -s substitution rules. This can cause unbounded memory allocation and lead to denial of service Out-of-Memory crash...
CVE-2025-64458
An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. NFKC normalization in Python is slow on Windows. As a consequence, django.http.HttpResponseRedirect, django.http.HttpResponsePermanentRedirect, and the shortcut django.shortcuts.redirect were subject to a...
CVE-2025-46404
A denial of service vulnerability exists in the lassoproviderverifysamlsignature functionality of Entr'ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability...