79 matches found
[SECURITY] Fedora 45 Update: cinnamon-6.7.8^unstable-6.fc45
Cinnamon is a Linux desktop which provides advanced innovative features and a traditional user experience. The desktop layout is similar to Gnome 2. The underlying technology is forked from Gnome Shell. The emphasis is put on making users feel at home and providing them with an easy to use and...
[SECURITY] Fedora 45 Update: cinnamon-6.7.8^unstable-3.fc45
Cinnamon is a Linux desktop which provides advanced innovative features and a traditional user experience. The desktop layout is similar to Gnome 2. The underlying technology is forked from Gnome Shell. The emphasis is put on making users feel at home and providing them with an easy to use and...
Fedora 45 : cinnamon / xdotool (2026-c836eb1b43)
The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-c836eb1b43 advisory. Rebuild for new libxdo .so version Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
[SECURITY] Fedora 45 Update: nemo-6.7.8^unstable-1.fc45
Nemo is the file manager and graphical shell for the Cinnamon desktop that makes it easy to manage your files and the rest of your system. It allows to browse directories on local and remote filesystems, preview files and launch applications associated with them. It is also responsible for handli...
[SECURITY] Fedora 45 Update: cinnamon-6.7.8^unstable-1.fc45
Cinnamon is a Linux desktop which provides advanced innovative features and a traditional user experience. The desktop layout is similar to Gnome 2. The underlying technology is forked from Gnome Shell. The emphasis is put on making users feel at home and providing them with an easy to use and...
[SECURITY] Fedora 45 Update: cinnamon-session-6.7.5^unstable-1.fc45
Cinnamon-session manages a Cinnamon desktop or GDM login session. It starts up the other core components and handles logout and saving the session...
[SECURITY] Fedora 45 Update: cinnamon-settings-daemon-6.7.5^unstable-1.fc45
A daemon to share settings from CINNAMON to other applications. It also handles global keybindings, and many of desktop-wide settings...
[SECURITY] Fedora 45 Update: cinnamon-desktop-6.7.5^unstable-1.fc45
The cinnamon-desktop package contains an internal library libcinnamon-desktop used to implement some portions of the CINNAMON desktop, and also some data files and other shared components of the CINNAMON user environment...
Fedora 45 : cinnamon / cinnamon-desktop / cinnamon-session / etc (2026-c4d5a488fe)
The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-c4d5a488fe advisory. - Update Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this issue but...
CVE-2025-63914
An issue was discovered in Cinnamon kotaemon 0.11.0. The mayextractzip function in the \libs\ktem\ktem\index\file\ui.py file does not check the contents of uploaded ZIP files. Although the contents are extracted into a temporary folder that is cleared before each extraction, successfully uploadin...
EUVD-2025-198989
An issue was discovered in Cinnamon kotaemon 0.11.0. The mayextractzip function in the \libs\ktem\ktem\index\file\ui.py file does not check the contents of uploaded ZIP files. Although the contents are extracted into a temporary folder that is cleared before each extraction, successfully uploadin...
CVE-2025-63914
An issue was discovered in Cinnamon kotaemon 0.11.0. The mayextractzip function in the \libs\ktem\ktem\index\file\ui.py file does not check the contents of uploaded ZIP files. Although the contents are extracted into a temporary folder that is cleared before each extraction, successfully uploadin...
CVE-2025-63914
The Cinnamon kotaemon RAG-based open source tool (version 0.11.0 ) is vulnerable to a ZIP bomb attack due to a lack of content validation in the _may_extract_zip function within the ystem\ktem index ile ui.py file. An attacker with file upload permissions can submit a malicious ZIP archive to tr...
CVE-2025-63914: Improper Handling of Highly Compressed Data (Data Amplification)
An issue was discovered in Cinnamon kotaemon 0.11.0. The mayextractzip function in the \libs\ktem\ktem\index\file\ui.py file does not check the contents of uploaded ZIP files. Although the contents are extracted into a temporary folder that is cleared before each extraction, successfully uploadin...
Cinnamon kotaemon 安全漏洞
Cinnamon kotaemon is a RAG-based open source tool from Cinnamon Open Source. A security vulnerability exists in Cinnamon kotaemon version 0.11.0, which stems from a failure of the mayextractzip function to check the contents of a ZIP file, which could lead to resource exhaustion...
CVE-2025-63914
An issue was discovered in Cinnamon kotaemon 0.11.0. The mayextractzip function in the \libs\ktem\ktem\index\file\ui.py file does not check the contents of uploaded ZIP files. Although the contents are extracted into a temporary folder that is cleared before each extraction, successfully uploadin...
CVE-2025-63914
An issue was discovered in Cinnamon kotaemon 0.11.0. The mayextractzip function in the \libs\ktem\ktem\index\file\ui.py file does not check the contents of uploaded ZIP files. Although the contents are extracted into a temporary folder that is cleared before each extraction, successfully uploadin...
Cinnamon kotaemon 安全漏洞
Cinnamon kotaemon is a RAG-based open source tool from Cinnamon Open Source. A security vulnerability exists in Cinnamon kotaemon version 0.11.0, which originates from cross-site scripting and could lead to the execution of arbitrary code...
Cinnamon kotaemon 安全漏洞
Cinnamon kotaemon is a RAG-based open source tool from Cinnamon Open Source. A security vulnerability exists in Cinnamon kotaemon version 0.11.0, which originates from storing plaintext passwords in client-side localStorage...