Schwachstellen, die jetzt zählen.

DSA-6614-1 ruby3.3 - security update

DSA-6614-1 ruby3.3 - security update

DSA-6614-1 ruby3.3 - security update

DSA-6614-1 ruby3.3 - security update

DSA-6614-1 ruby3.3 - security update

zlib: Schwachstelle ermöglicht Denial of Service

cpio: cpio: out-of-bounds read in from_ascii() when parsing newc/crc archive headers

DSA-6614-1 ruby3.3 - security update

DSA-6614-1 ruby3.3 - security update

DSA-6614-1 ruby3.3 - security update

DSA-6614-1 ruby3.3 - security update

github.com/gitleaks/gitleaks: gitleaks: Credential disclosure via insecure report file permissions

DSA-6616-1 linux - security update

kernel: kernel: xen-blkback: Denial of Service via race condition reading I/O statistics

DSA-6616-1 linux - security update

kernel: kernel: xen-netback: Denial of Service via race condition during interface disconnect

DSA-6616-1 linux - security update

kernel: kernel: xen-netback: Denial of Service via use-after-free during queue teardown

fluxbox: fluxbox: Denial of Service via crafted style geometry values

fluxbox: fluxbox: Arbitrary command execution via crafted style background values

undici vulnerable to cache poisoning and cross-user disclosure via intermediate redirect hops

qt6-qtwebsockets: Information disclosure vulnerability in authentication handling of QWebSocket impacts Qt Framework

Regexp2: Unbounded memory amplification via large `{m}` quantifier on a zero-width subexpression

github.com/dlclark/regexp2: regexp2: Denial of Service via unbounded memory allocation during pattern matching

nut: nut: Information disclosure via uninitialized stack memory in blazer_usb driver

fastnetmon: fastnetmon: Denial of Service via crafted sFlow packet

fastnetmon: fastnetmon: Denial of Service via crafted NetFlow packets

fastnetmon: FastNetMon: Denial of Service via crafted IPv6 packet header

fastnetmon: FastNetMon: Denial of Service via race condition in NetFlow template processing

fastnetmon: fastnetmon: Denial of Service via out-of-bounds read during packet parsing

fastnetmon: FastNetMon: Denial of Service via race condition in IPv6 traffic monitoring

github.com/kubeflow/pipelines: Kubeflow Pipelines: Cross-tenant data disclosure via missing namespace in execution cache keys

github.com/kubeflow/pipelines: Kubeflow Pipelines: Information disclosure via default proxy signing key

github.com/kubeflow/pipelines: Kubeflow Pipelines: Unauthorized modification of shared pipelines via authorization bypass