GHSA-8C52-X9W7-VC95 XWiki view file macro: User can view content of office file without view rights on the attachment

Summary A user with no view rights on a page may see the content of an office attachment displayed with the view file macro. Details If on a public page is displayed an office attachment from a restricted page, a user with no view rights on the restricted page can view the attachment content, no...

XWiki view file macro: User can view content of office file without view rights on the attachment

Summary A user with no view rights on a page may see the content of an office attachment displayed with the view file macro. Details If on a public page is displayed an office attachment from a restricted page, a user with no view rights on the restricted page can view the attachment content, no...

PT-2025-47417

Name of the Vulnerable Software and Affected Versions XWiki versions prior to 1.27.0 Description A user lacking view permissions on a page may be able to access the content of an office attachment displayed using the view file macro. This occurs when an office attachment from a restricted page is...

Siemens SIMATIC S7-1500 Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2017-16931)

parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandlePEReference function in the case of a '%' character in a DTD name. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

[SECURITY] Fedora 43 Update: rust-manyhow-0.11.4-1.fc43

Proc macro error handling =C3=A0 la anyhow x proc-macro-error...

[SECURITY] Fedora 43 Update: rust-proc-macro-utils-0.10.0-1.fc43

Low-level utilities on proc-macro and proc-macro2 types...

[SECURITY] Fedora 43 Update: rust-attribute-derive-macro-0.10.5-1.fc43

Clap for proc macro attributes...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988694)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988694 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/64s: fix program check interrupt emergency stack path Emergency stack path was jumping in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989907)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989907 advisory. In the Linux kernel, the following vulnerability has been resolved: igc: Reinstate IGCREMOVED logic and implement it properly The initially merged version of the ig...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989299)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989299 advisory. In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd: fix potential integer overflow on shift of a int The left shift of int 32 bit integ...

Exploit for Code Injection in Xwiki

CVE-2025-24893-PoC XWiki Unauthenticated RCE Exploit for Reve...

[SECURITY] Fedora 42 Update: rust-proc-macro-utils-0.10.0-1.fc42

Low-level utilities on proc-macro and proc-macro2 types...

[SECURITY] Fedora 42 Update: rust-manyhow-macros-0.11.4-1.fc42

Macro for manyhow...

[SECURITY] Fedora 42 Update: rust-manyhow-0.11.4-1.fc42

Proc macro error handling =C3=A0 la anyhow x proc-macro-error...

[SECURITY] Fedora 42 Update: rust-attribute-derive-macro-0.10.5-1.fc42

Clap for proc macro attributes...

[SECURITY] Fedora 41 Update: rust-proc-macro-utils-0.10.0-1.fc41

Low-level utilities on proc-macro and proc-macro2 types...

[SECURITY] Fedora 41 Update: rust-attribute-derive-macro-0.10.5-1.fc41

Clap for proc macro attributes...

[SECURITY] Fedora 41 Update: rust-manyhow-0.11.4-1.fc41

Proc macro error handling =C3=A0 la anyhow x proc-macro-error...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: exynos: Fixed the programming of HCIUTRLNEXUSTYPE. On the Google gs101, the number of UTP transfer request slots is 32. In this case, the driver incorrectly programs UTRLNEXUSTYPE as 0. This occurs because the left sid...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: crypto: ecdsa – Mitigation of integer overflows in DIVROUNDUP. Herbert notes that DIVROUNDUP may cause unnecessary overflows if the -keysize callback of an ecdsa implementation returns an unusually large value. Instead, Herbert...