Schwachstellen, die jetzt zählen.

DSA-6616-1 linux - security update

kernel: kernel: xen-netback: Denial of Service via use-after-free during queue teardown

fluxbox: fluxbox: Denial of Service via crafted style geometry values

fastnetmon: FastNetMon: Denial of Service via race condition in IPv6 traffic monitoring

github.com/kubeflow/pipelines: Kubeflow Pipelines: Cross-tenant data disclosure via missing namespace in execution cache keys

github.com/kubeflow/pipelines: Kubeflow Pipelines: Information disclosure via default proxy signing key

github.com/kubeflow/pipelines: Kubeflow Pipelines: Information disclosure via SQL injection in pagination token handling

github.com/kubeflow/pipelines: Kubeflow Pipelines: Server-Side Request Forgery via unrestricted pipeline URL fetching

filelock: filelock: unauthorized concurrent access via insecure claim directory permissions

filelock: filelock: Denial of Service (DoS) via symbolic link race condition

filelock: filelock: Denial of Service via improper lock file permissions on Windows

@modelcontextprotocol/sdk: @modelcontextprotocol/client: Model Context Protocol TypeScript SDK: Sensitive information disclosure via cross-origin redirects

@modelcontextprotocol/sdk: @modelcontextprotocol/server: @modelcontextprotocol/express: @modelcontextprotocol/server-legacy: Model Context Protocol TypeScript…

altair: Altair: Cross-site scripting via crafted iframe sandbox URL

### Summary Altair `8.5.7` accepts plugin configuration directly from the `iframe-sandbox` query string. When `plugin_sandbox_opts` contains `type: "scripts"` and an attacker-controlled URL in `scriptUrls`, the sandbox page creates a classic ` ` element and loads the supplied script. In the intended plugin flow, this page runs inside an ` ` without `allow-same-origin`, giving plugin code an opaque origin. However, if a victim opens the crafted sandbox URL directly, that…

@angular/common: @angular/common: Cross-Site Request Forgery token leakage via URL parsing discrepancy

DSA-6615-1 libreoffice - security update

libreoffice: libreoffice: Denial of Service via crafted dBASE index file

ImageMagick: Mehrere Schwachstellen

ImageMagick: ImageMagick: Denial of Service via infinite loop in SVG decoding

accel-ppp: accel-ppp: Denial of Service via heap buffer overflow in logging targets

github.com/goposta/posta: Posta: Server-side request forgery via arbitrary webhook URLs

neuron: neuron: Denial of Service via crafted model dataset

modsecurity: ModSecurity: Security rule bypass via regular expression limit exhaustion

dnf5daemon-server: dnf5: dnf5daemon-server: missing session-owner check allows foreign D-Bus callers to replace another client's resolved transaction

mdns: mdns: Denial of Service via uncontrolled recursion in domain name parsing

org.apache.sling/org.apache.sling.engine: Apache Sling Engine: Stored Cross-Site Scripting via header protection bypass

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling Engine. Content-Type, charset, and redirect changes from an included component evade the protectheaders / checkcontenttype enforcement through setHeader(), repeated calls to setContentType(), the charset APIs, Servlet 6.1 redirect overloads, and stale config - enabling stored XSS despite enabled protections. This issue affects Apache Sling Engine before 3.0.4…

Ansible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of cve-2024-9902)

github.com/kyverno/kyverno: Kyverno: Denial of Service via unchecked type assertion in variable substitution

github.com/kyverno/kyverno: Kyverno: Denial of Service via unbounded CEL policy evaluation

keycloak-services: keycloak-services: Protocol mapper with jsonType=JSON bypasses token sanitization

keycloak-services: keycloak-services: DCR azp and sid claim substitution allows Account REST session takeover

keycloak-services: keycloak-services: CIBA sub parameter injection causes attacker authentication to issue victim tokens

keycloak-services: keycloak-services: DCR registration-time claim-path gap allows forging realm_access.roles