186104 matches found
Use of Less Trusted Source
Overview Affected versions of this package are vulnerable to Use of Less Trusted Source via the HTTP request parser's handling of absolute-form request targets, where the scheme supplied in the request URL is trusted without validation. When aiohttp is used as a reverse proxy or in a configuratio...
MGASA-2026-0521 Updated openssh packages fix security vulnerabilities
Local mitm of x11 forwarding via abstract unix socket pre-binding in Red Hat Enterprise Linux openssh client versions. CVE-2026-55655 sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker-controlled server...
Updated libpng package fixes a security vulnerability
Use-after-free of zlib input in pngreadend after incomplete zTXt, iTXt or iCCP decompression. CVE-2026-46675...
Updated openssh packages fix security vulnerabilities
Local mitm of x11 forwarding via abstract unix socket pre-binding in Red Hat Enterprise Linux openssh client versions. CVE-2026-55655 sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker-controlled server...
MGASA-2026-0520 Updated libpng package fixes a security vulnerability
Use-after-free of zlib input in pngreadend after incomplete zTXt, iTXt or iCCP decompression. CVE-2026-46675...
firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the DOM: Content Processes component...
firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Graphics: Canvas2D component...
firefox: Use-after-free in the DOM: Core & HTML component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component...
firefox: Privilege escalation due to use-after-free in the Graphics: WebRender component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to use-after-free in the Graphics: WebRender component...
firefox: Sandbox escape due to use-after-free in the DOM: Core & HTML component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the DOM: Core & HTML component...
firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Graphics: Canvas2D component...
firefox: firefox: Sandbox escape via use-after-free in DOM component
A flaw was found in Firefox. A use-after-free memory flaw in the Document Object Model DOM Core and HTML component allows a remote attacker to perform a sandbox escape. By enticing a user to visit a specially crafted web page, an attacker can leverage this vulnerability to execute arbitrary code...
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component...
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component...
firefox: thunderbird: Use-after-free in the XSLT component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the XSLT component...
firefox: thunderbird: Use-after-free in the Widget component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Widget component...
firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Graphics: Canvas2D component...
firefox: Sandbox escape due to use-after-free in the Graphics component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the Graphics component...
Important: Red Hat Security Advisory: thunderbird security update
An update for thunderbird is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...
firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the DOM: Content Processes component...