Google Chrome: Mehrere Schwachstellen
tag:blogger.com,1999:blog-8982037438137564684.post-21581114405221428122026-11-11T12:02:26.373-08:002026-11-11T14:39:27.014-08:00Stable Channel Update for…
Google Chrome: Mehrere Schwachstellen
tag:blogger.com,1999:blog-8982037438137564684.post-21581114405221428122026-11-11T12:02:26.373-08:002026-11-11T14:39:27.014-08:00Stable Channel Update for…
Google Chrome: Mehrere Schwachstellen
tag:blogger.com,1999:blog-8982037438137564684.post-21581114405221428122026-11-11T12:02:26.373-08:002026-11-11T14:39:27.014-08:00Stable Channel Update for…
Google Chrome: Mehrere Schwachstellen
tag:blogger.com,1999:blog-8982037438137564684.post-21581114405221428122026-11-11T12:02:26.373-08:002026-11-11T14:39:27.014-08:00Stable Channel Update for…
Google Chrome: Mehrere Schwachstellen
tag:blogger.com,1999:blog-8982037438137564684.post-21581114405221428122026-11-11T12:02:26.373-08:002026-11-11T14:39:27.014-08:00Stable Channel Update for…
Google Chrome: Mehrere Schwachstellen
tag:blogger.com,1999:blog-8982037438137564684.post-21581114405221428122026-11-11T12:02:26.373-08:002026-11-11T14:39:27.014-08:00Stable Channel Update for…
Google Chrome: Mehrere Schwachstellen
tag:blogger.com,1999:blog-8982037438137564684.post-21581114405221428122026-11-11T12:02:26.373-08:002026-11-11T14:39:27.014-08:00Stable Channel Update for…
Google Chrome: Mehrere Schwachstellen
tag:blogger.com,1999:blog-8982037438137564684.post-21581114405221428122026-11-11T12:02:26.373-08:002026-11-11T14:39:27.014-08:00Stable Channel Update for…
Mittel 5.9Linux-Server
Node.js: Mehrere Schwachstellen
nodejs: nodejs: Denial of Service via cancelled HTTP/2 file downloads
Mittel 6.8Linux-Server
Node.js: Mehrere Schwachstellen
nodejs: nodejs: Certificate validation bypass via TLS session cache reuse
Mittel 6.2Linux-Server
Node.js: Mehrere Schwachstellen
nodejs: Node.js: Information disclosure via invalid proxy configuration error messages
Mittel 5.9Linux-Server
Node.js: Mehrere Schwachstellen
nodejs: nodejs: Denial of service via HTTP/2 memory exhaustion
Mittel 4.2Linux-Server
Node.js: Mehrere Schwachstellen
nodejs: Node.js: Mutual TLS authorization bypass via incomplete SNI context configuration
Mittel 5.9Linux-Server
Node.js: Mehrere Schwachstellen
nodejs: Node.js: Denial of service via abrupt disconnection during zlib compression
Mittel 5.9Linux-Server
Node.js: Mehrere Schwachstellen
nodejs: nodejs: Denial of Service via HTTP/2 Alt-Svc heap buffer overflow
Mittel 5.9Linux-Server
Apache HTTP Server: Mehrere Schwachstellen
httpd: httpd: Denial of Service via stack-based buffer overflow in mod_vhost_alias
Mittel 6.5Linux-Server
aap-gateway-operator: resource-server secret exposed in plaintext in the AutomationController custom resource
Mittel 6.5Linux-Server
awx: webhook credential assignment omits use_role check, exposing another user's token
Mittel 6.5Linux-Server
ansible-pylibssh: accepts a changed SSH host key when host_key_auto_add is enabled
MittelLinux-Server
org.apache.xmlgraphics/batik-dom: Apache XML Graphics Batik: Harden validation in SAXDocumentFactory
Mittel 5.5Linux-Server
BusyBox: Mehrere Schwachstellen
busybox: Out-of-bounds read in volume_id_get_buffer() via an offset+length wraparound
Mittel 6.3Linux-Server
BusyBox: Mehrere Schwachstellen
busybox: tar deferred hardlink target resolved through a deferred symlink escapes the extraction directory
Mittel 6.3Linux-Server
BusyBox: Mehrere Schwachstellen
busybox: cpio hardlink target not sanitized under FEATURE_PATH_TRAVERSAL_PROTECTION
Mittel 5.5Linux-Server
BusyBox: Mehrere Schwachstellen
busybox: Divide-by-zero and heap over-read in the volume_id HFS+ prober
Mittel 5.5Linux-Server
BusyBox: Mehrere Schwachstellen
busybox: Divide-by-zero in the volume_id FAT prober via a zero sectors_per_cluster value
Mittel 4.3Linux-Server
BusyBox: Mehrere Schwachstellen
busybox: Use-after-free of requested_ipv6 in udhcpc6
Mittel 5.3Linux-Server
BusyBox: Mehrere Schwachstellen
busybox: httpd password rule bypass for pre-compressed .gz files via Accept-Encoding: gzip
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
thunderbird: OAuth2 access token could be sent over an unencrypted connection with Exchange accounts
Mittel 6.6Linux-Server
keycloak-services: keycloak-services: Delegated admin escalates to realm-admin via group move
Mittel 5.3Linux-Server
activestorage: Active Storage: File size validation bypass via missing direct-upload content length constraints
### Impact `ActiveStorage::Service::GCSService#url_for_direct_upload` does not bind the declared content length into the signed direct-upload URL, and `#headers_for_direct_upload` returns no length constraint, so the URL authorizes an upload body of any size. A direct-upload client could store a file larger than the `byte_size` it declared, and the resulting blob keeps the declared size, possibly bypassing application file size validations and quotas. This is the weakness…