[SECURITY] Fedora 45 Update: cinnamon-6.7.8^unstable-6.fc45

Cinnamon is a Linux desktop which provides advanced innovative features and a traditional user experience. The desktop layout is similar to Gnome 2. The underlying technology is forked from Gnome Shell. The emphasis is put on making users feel at home and providing them with an easy to use and...

[SECURITY] Fedora 45 Update: cinnamon-6.7.8^unstable-3.fc45

Cinnamon is a Linux desktop which provides advanced innovative features and a traditional user experience. The desktop layout is similar to Gnome 2. The underlying technology is forked from Gnome Shell. The emphasis is put on making users feel at home and providing them with an easy to use and...

Fedora 45 : cinnamon / xdotool (2026-c836eb1b43)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-c836eb1b43 advisory. Rebuild for new libxdo .so version Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

[SECURITY] Fedora 45 Update: cinnamon-6.7.8^unstable-1.fc45

Cinnamon is a Linux desktop which provides advanced innovative features and a traditional user experience. The desktop layout is similar to Gnome 2. The underlying technology is forked from Gnome Shell. The emphasis is put on making users feel at home and providing them with an easy to use and...

[SECURITY] Fedora 45 Update: cinnamon-desktop-6.7.5^unstable-1.fc45

The cinnamon-desktop package contains an internal library libcinnamon-desktop used to implement some portions of the CINNAMON desktop, and also some data files and other shared components of the CINNAMON user environment...

[SECURITY] Fedora 45 Update: cinnamon-settings-daemon-6.7.5^unstable-1.fc45

A daemon to share settings from CINNAMON to other applications. It also handles global keybindings, and many of desktop-wide settings...

[SECURITY] Fedora 45 Update: cinnamon-session-6.7.5^unstable-1.fc45

Cinnamon-session manages a Cinnamon desktop or GDM login session. It starts up the other core components and handles logout and saving the session...

[SECURITY] Fedora 45 Update: nemo-6.7.8^unstable-1.fc45

Nemo is the file manager and graphical shell for the Cinnamon desktop that makes it easy to manage your files and the rest of your system. It allows to browse directories on local and remote filesystems, preview files and launch applications associated with them. It is also responsible for handli...

Fedora 45 : cinnamon / cinnamon-desktop / cinnamon-session / etc (2026-c4d5a488fe)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-c4d5a488fe advisory. - Update Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this issue but...

chk (>=0.4.2, <=0.4.3), cinnamon-core (0.1.0) +12 more potentially affected by CVE-2026-59890 via setuptools (67.1.0)

setuptools PYPI version 67.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - chk =0.4.2, =0.7.4, =0.8.0 - perceval 0.21.3 - perceval-mozilla 0.3.7 - perceval-opnfv 0.2.7 - perceval-puppet 0.2.7 - perceval-weblate 0.2...

CVE-2025-63914

An issue was discovered in Cinnamon kotaemon 0.11.0. The mayextractzip function in the \libs\ktem\ktem\index\file\ui.py file does not check the contents of uploaded ZIP files. Although the contents are extracted into a temporary folder that is cleared before each extraction, successfully uploadin...

EUVD-2025-198989

An issue was discovered in Cinnamon kotaemon 0.11.0. The mayextractzip function in the \libs\ktem\ktem\index\file\ui.py file does not check the contents of uploaded ZIP files. Although the contents are extracted into a temporary folder that is cleared before each extraction, successfully uploadin...

CVE-2025-63914

The Cinnamon kotaemon RAG-based open source tool (version 0.11.0 ) is vulnerable to a ZIP bomb attack due to a lack of content validation in the _may_extract_zip function within the ystem\ktem index ile ui.py file. An attacker with file upload permissions can submit a malicious ZIP archive to tr...

CVE-2025-63914

An issue was discovered in Cinnamon kotaemon 0.11.0. The mayextractzip function in the \libs\ktem\ktem\index\file\ui.py file does not check the contents of uploaded ZIP files. Although the contents are extracted into a temporary folder that is cleared before each extraction, successfully uploadin...

CVE-2025-63914

An issue was discovered in Cinnamon kotaemon 0.11.0. The mayextractzip function in the \libs\ktem\ktem\index\file\ui.py file does not check the contents of uploaded ZIP files. Although the contents are extracted into a temporary folder that is cleared before each extraction, successfully uploadin...

CVE-2025-63914

An issue was discovered in Cinnamon kotaemon 0.11.0. The mayextractzip function in the \libs\ktem\ktem\index\file\ui.py file does not check the contents of uploaded ZIP files. Although the contents are extracted into a temporary folder that is cleared before each extraction, successfully uploadin...

CVE-2025-63914: Improper Handling of Highly Compressed Data (Data Amplification)

An issue was discovered in Cinnamon kotaemon 0.11.0. The mayextractzip function in the \libs\ktem\ktem\index\file\ui.py file does not check the contents of uploaded ZIP files. Although the contents are extracted into a temporary folder that is cleared before each extraction, successfully uploadin...

CVE-2025-63914

An issue was discovered in Cinnamon kotaemon 0.11.0. The mayextractzip function in the \libs\ktem\ktem\index\file\ui.py file does not check the contents of uploaded ZIP files. Although the contents are extracted into a temporary folder that is cleared before each extraction, successfully uploadin...

Cinnamon Kotaemon security vulnerability

Cinnamon kotaemon is a RAG-based open source tool from Cinnamon Open Source. A security vulnerability exists in Cinnamon kotaemon version 0.11.0, which stems from a failure of the mayextractzip function to check the contents of a ZIP file, which could lead to resource exhaustion...

Cinnamon Kotaemon security vulnerability

Cinnamon kotaemon is a RAG-based open source tool from Cinnamon Open Source. A security vulnerability exists in Cinnamon kotaemon version 0.11.0, which originates from storing plaintext passwords in client-side localStorage...