Schwachstellen, die jetzt zählen.

krb5: MIT krb5 kadmind unauthenticated memory leak DoS in RPCSEC_GSS buffer decode failure

The RPCSEC_GSS authentication routines in lib/rpc/authgss_prot.c in MIT Kerberos 5 (aka krb5) 1.4 and later do not free partially decoded buffers on failure, which allows remote attackers to cause a denial of service (memory leak in kadmind) via crafted RPCSEC_GSS messages.

krb5: MIT krb5 GSS-RPC client memory leak on XID mismatch retries

krb5: Improper authorization via flawed PAC checksum verification

krb5: Unauthorized key reset of protected principal via kpasswd

PackageKit: PackageKit: Privilege escalation via path traversal in the Zypp backend

keycloak-services: keycloak-services: Client-level mandatory PKCE bypass via login-actions entry point

GStreamer: Mehrere Schwachstellen

gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: Out-of-bounds read in mxfdemux via unchecked delta_id and slice index

GStreamer: Mehrere Schwachstellen

gstreamer1-plugins-bad-free: gst-plugins-bad: use of uninitialized GstH265HRDParams in gst_h265_parse_vps() multi-HRD workaround loop

GStreamer: Mehrere Schwachstellen

gst-plugins-good: gst-plugins-good: Local file disclosure via unvalidated file:// URIs in adaptivedemux2 manifest handling

GStreamer: Mehrere Schwachstellen

A flaw was found in GStreamer's gst-plugins-good, specifically in the H.264 RTP depayloader element. When processing MTAP16 or MTAP24 multi-time aggregation RTP packets, a signed/unsigned integer conversion error causes the remaining-length counter to underflow to a large positive value when the packet is truncated. This allows a remote, unauthenticated attacker to trigger an out-of-bounds heap read of up to approximately 64 KiB of process memory by sending a single…

QT: Schwachstelle ermöglicht Denial of Service

qt: Uncontrolled resource consumption vulnerability in HTTP response handling of Qt Network impacts Qt Framework

DSA-6617-1 symfony - security update

DSA-6617-1 symfony - security update

DSA-6617-1 symfony - security update

DSA-6617-1 symfony - security update

DSA-6617-1 symfony - security update

DSA-6617-1 symfony - security update

DSA-6617-1 symfony - security update

DSA-6617-1 symfony - security update

DSA-6617-1 symfony - security update

DSA-6617-1 symfony - security update

DSA-6617-1 symfony - security update

DSA-6617-1 symfony - security update

DSA-6617-1 symfony - security update

DSA-6617-1 symfony - security update

DSA-6617-1 symfony - security update

unrealircd: unrealircd: Command injection via unescaped message tag

kernel: kernel: privilege escalation via missing shared fragment flag in skb_zerocopy

kernel: kernel: Denial of Service via premature connection tracking expiration on TCP RST packets

kernel: kernel: Denial of Service via use-after-free in sch_teql