Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Use-after-free in the CSS Parsing and Computation component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Incorrect boundary conditions in the DOM: CSS Object Model component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Same-origin policy bypass in the Networking: HTTP component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Invalid pointer in the DOM: Editor component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Use-after-free in the Cycle Collector component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Incorrect boundary conditions in the JavaScript: GC component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Incorrect boundary conditions in the DOM: Core & HTML component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Use-after-free in the Layout component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Use-after-free in the Audio/Video component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Sandbox escape due to use-after-free in the DOM: Service Workers component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Use-after-free in the DOM: HTML Parser component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Use-after-free in the DOM: Core & HTML component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Sandbox escape due to use-after-free in the Audio/Video: cubeb component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Use-after-free in the Audio/Video component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Storage: Cache API component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Use-after-free in the DOM: HTML Parser component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Use-after-free in the Graphics: Canvas2D component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Incorrect boundary conditions in the Networking: HTTP component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Sandbox escape in the DOM: Navigation component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Privilege escalation in the DOM: Navigation component
Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: Text component
Hoch 7.5Linux-Server
busybox: Heap buffer overflow in wget FTP resume when the resume offset exceeds the reported file size
A flaw was found in BusyBox. When resuming a download over File Transfer Protocol (FTP), the wget utility fails to verify that the resume offset does not exceed the file size reported by the server, resulting in an integer calculation error. A malicious FTP server or an on-path network attacker can exploit this issue by returning crafted file size metadata, triggering a heap-based buffer overflow with attacker-controlled data. Successful exploitation may allow an attacker to…
Hoch 7.8Linux-Server
PackageKit: PackageKit: Privilege escalation via security update rollback in Zypp backend
Mittel 6.6Linux-Server
cockpit: cockpit-storaged: Tang keyserver address from an untrusted LUKS header clevis token reaches curl's argument vector as an option
Hoch 7.5Linux-Server
krb5: Unauthenticated KDC DoS based on ASN.1 decoder read overrun
Hoch 7.2Linux-Server
konflux-ci: Unvalidated hostname fields enable Caddyfile config injection in the Konflux UI proxy generator, allowing an unauthenticated route to be spliced…
Hoch 7.5Linux-Server
flightctl-api: flightctl-remote-access: flightctl: Unbounded TLS handshake in ConnContext can block accepting connections
A flaw was found in flightctl. A TLS handshake is performed synchronously in the HTTP server’s connection-context callback without a deadline. A network-reachable unauthenticated client can stall the handshake and prevent the affected listener from accepting new connections.
Mittel 4.8Linux-Server
keycloak-services: keycloak-services: Login-failure upsert trusts MySQL/MariaDB affected-row count
Mittel 5.3Linux-Server
rack: rack: Security header bypass via unnormalized dot segments in request paths
## Summary `Rack::Static` normalizes the request path with `Utils.clean_path_info` when deciding which file to serve, but matches `header_rules` against a path that is only URL-decoded. A request containing dot segments, raw or percent-encoded, is served the normalized target file while the header rules for that file's location are not applied. This allows an attacker to receive a protected static file without the security headers configured for it. ## Details…