24117 matches found
Astra Linux ā Vulnerability in qtbase-opensource-src
A issue was discovered in the private API function qDecodeDataUrl within QtCore, which is used in QTextDocument and QNetworkReply, and potentially in user code. If this function is called with malformed dataāfor example, a URL that contains a ācharsetā parameter without a value such as...
BIT-MASTODON-2026-22246 Local Mastodon users can enumerate and access severed relationships of every other local user
Mastodon is a free, open-source social network server based on ActivityPub. Mastodon 4.3 added notifications of severed relationships, allowing end-users to inspect the relationships they lost as the result of a moderation action. The code allowing users to download lists of severed relationships...
CLSA-2026-1768301582 ruby: Fix of CVE-2025-24294
CVE-2025-24294: Limit the length of a decompressed domain name to prevent DoS in resolv gem...
SUSE-SU-2026:0119-1 Security update for curl
This update for curl fixes the following issues: - CVE-2025-14017: Fixed broken TLS options for threaded LDAPS bsc1256105...
CakePHP 5.3.1 Released
CakePHP 5.3.1 Released The CakePHP core team is happy to announce the immediate availability of CakePHP 5.3.1. This is a maintenance release for the 5.3 branch that fixes community reported issues, regressions and a security issue with PaginatorHelper. Bugfixes You can expect the following change...
OPENSUSE-SU-2026:10040-1 libsoup-3_0-0-3.6.5-11.1 on GA media
These are all security issues fixed in the libsoup-30-0-3.6.5-11.1 package on the GA media of openSUSE Tumbleweed...
CVE-2025-68339 affecting package kernel for versions less than 6.6.119.3-1
CVE-2025-68339 affecting package kernel for versions less than 6.6.119.3-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-68219 affecting package kernel for versions less than 6.6.119.3-1
CVE-2025-68219 affecting package kernel for versions less than 6.6.119.3-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-40264 affecting package kernel for versions less than 6.6.119.3-1
CVE-2025-40264 affecting package kernel for versions less than 6.6.119.3-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-22771
Summary: CVE-2026-22771 affects Envoy Gateway. Prior to versions 1.5.7 and 1.6.2, EnvoyExtensionPolicy Lua scripts executed by the Envoy proxy can leak credentials (e.g., TLS private keys and other secrets) used by the proxy, enabling access to control-plane secrets. The issue is described across...
ALSA-2026:0422 Important: libsoup security update
The libsoup packages provide an HTTP client and server library for GNOME. Security Fixes: libsoup: libsoup: Duplicate Host Header Handling Causes Host-Parsing Discrepancy First- vs Last-Value Wins CVE-2025-14523 For more details about the security issues, including the impact, a CVSS score,...
ALSA-2026:0464 Moderate: cups security update
The Common UNIX Printing System CUPS provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fixes: CUPS: Local denial-of-service via cupsd.conf update and related issues CVE-2025-61915 cups: Slow client communication leads to a possible DoS attack CVE-2025-584...
Fedora: Security Advisory (FEDORA-2026-cb424f8aa2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 43 : libsodium (2026-cb424f8aa2)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-cb424f8aa2 advisory. Version 1.0.21 This point release includes all the changes from 1.0.20-stable, which include a security fix for the cryptocoreed25519isvalidpoint function, a...
coredns-1.14.0-1.1 on GA media (moderate)
coredns-1.14.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10021-1 Rating: moderate Cross-References: CVE-2025-68156 CVSS scores: CVE-2025-68156 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-68156 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...
CVE-2025-46297
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.2. An app may be able to access protected files within an App Sandbox container...
UBUNTU-CVE-2025-46299
A memory initialization issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously crafted web content may disclose internal states of the app...
CVE-2025-46297
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.2. An app may be able to access protected files within an App Sandbox container...
CVE-2025-46297
CVE-2025-46297 describes a permissions issue in macOS Tahoe up to 26.1 that could allow an app to access protected files inside an App Sandbox container. The Red Hat and EUVD entries reiterate the same underlying problem. Appleās security content indicates the fix is in macOS Tahoe 26.2, addressi...