Schwachstellen, die jetzt zählen.

rack: Rack: Security bypass and URL manipulation via invalid HTTP host headers

## Summary `Rack::Request#host_with_port`, and therefore `#base_url` and `#url`, return the raw authority string when it fails validation. An attacker-controlled `Host`, `X-Forwarded-Host`, or `Forwarded: host=` value containing characters that are not permitted in an authority is embedded verbatim in URLs generated by the application. This completes the fix for CVE-2026-34835 (GHSA-g2pf-xv49-m2h5), which made `#host` and `#hostname` return `nil` for an invalid authority but…

Stable Channel Update for Desktop

tag:blogger.com,1999:blog-8982037438137564684.post-17864803764547981322026-11-09T12:52:57.820-08:002026-11-11T12:10:24.691-08:00Stable Channel Update for…

Stable Channel Update for Desktop

tag:blogger.com,1999:blog-8982037438137564684.post-17864803764547981322026-11-09T12:52:57.820-08:002026-11-11T12:10:24.691-08:00Stable Channel Update for…

tuf: python-tuf: Unauthorized update delivery via case-insensitive path matching on Windows

openscap: One-byte heap buffer overflow in sds-compose may lead to Denial-of-Service

ffmpeg: SGI encoder out-of-bounds read

automation-controller: automation-controller: quadratic regex in schedule rrule validation allows an authenticated user to exhaust API web workers (denial of…

krb5: MIT krb5 kadmind authenticated memory exhaustion DoS via unbounded RPC XDR allocation

krb5: MIT krb5 kadmind authenticated DoS exploiting dereference of null policy name pointers

krb5: MIT krb5 KDC unauthenticated memory leak DoS in KDB keytab key decryption error path

krb5: MIT krb5 kadmind authenticated memory leak DoS in xdr_krb5_tl_data() decode failure

krb5: MIT krb5 kadmind unauthenticated memory leak DoS in RPCSEC_GSS buffer decode failure

krb5: Improper authorization via flawed PAC checksum verification

krb5: Unauthorized key reset of protected principal via kpasswd

keycloak-services: keycloak-services: Client-level mandatory PKCE bypass via login-actions entry point

GStreamer: Mehrere Schwachstellen

gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: Out-of-bounds read in mxfdemux via unchecked delta_id and slice index

GStreamer: Mehrere Schwachstellen

gstreamer1-plugins-bad-free: gst-plugins-bad: use of uninitialized GstH265HRDParams in gst_h265_parse_vps() multi-HRD workaround loop

QT: Schwachstelle ermöglicht Denial of Service

qt: Uncontrolled resource consumption vulnerability in HTTP response handling of Qt Network impacts Qt Framework

kernel: kernel: Denial of Service via use-after-free in sch_teql

kernel: kernel: Denial of Service via improper session cleanup in ksmbd

kernel: kernel: ksmbd: Denial of Service via unbounded sessions per connection

kernel: kernel: ksmbd: Denial of Service via use-after-free in session channel handling

kernel: kernel: Denial of Service in ksmbd via deadlock during session cleanup

kernel: kernel: Information disclosure via crafted SMB session setup responses

kernel: kernel: Denial of service via empty truncated responses in SMB client

kernel: kernel: ksmbd: Denial of Service via out-of-bounds write in get_file_stream_info()

kernel: kernel: Denial of service via use-after-free in ALSA Line 6 audio driver

cpio: cpio: out-of-bounds read in from_ascii() when parsing newc/crc archive headers

DSA-6616-1 linux - security update

kernel: kernel: xen-blkback: Denial of Service via race condition reading I/O statistics

DSA-6616-1 linux - security update

kernel: kernel: xen-netback: Denial of Service via race condition during interface disconnect