A vulnerability in GitLab CE/EE versions from 17.6.5 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 allowed an unauthenticated user to retrieve sensitive internal server credentials due to improper filtering of internal response headers. This issue has been fixed in versions 19.3.6, 19.4.3, and 19.5.1.
A vulnerability in GitLab CE/EE versions from 15.0 up to but not including 19.3.6, 19.4 up to 19.4.3, and 19.5 up to 19.5.1 allowed authenticated users without project membership to read confidential issue titles from private projects when referenced in merge requests of public projects. This occurred due to a cache key that improperly shared rendered content across users, exposing sensitive information.
GitLab EE versions 19.2 up to but not including 19.3.6, 19.4 up to 19.4.3, and 19.5 up to 19.5.1 contain an authorization flaw. This flaw allows an authenticated user with group Owner permissions to bypass an instance administrator's lock on a group's Duo availability and re-enable AI-backed data egress to a third-party service for that group and its descendant projects. The issue arises from insufficient granularity in the enforcement of admin-lock controls. GitLab has released fixes in versions 19.3.6, 19.4.3, and 19.5.1.
Docker Engine contains a vulnerability in its handling of insecure registries where a DNS response containing both a loopback IP and a non-loopback attacker IP can bypass certificate verification and enable HTTP fallback. This occurs because the insecure registry check uses an any-match DNS approach that considers a hostname insecure if any resolved address matches an insecure CIDR, but the transport reconnects using the hostname rather than the matched address. This flaw is fixed in Docker Engine version 18.09.0-355.oe2203sp4.
FreeRDP versions before 2.11.8-11.oe2403sp4 contain multiple security vulnerabilities including heap buffer overflows, out-of-bounds reads, and uninitialized heap memory disclosures. These flaws arise from improper validation and handling of RDP protocol messages such as Server Redirection PDUs, URBDRC channel messages, and RPC gateway transport parser data. Exploitation can lead to client crashes, denial of service, information disclosure, and potentially remote code execution when combined with other vulnerabilities. The issues are fixed in version 2.11.8-11.oe2403sp4.
A cryptographic vulnerability was identified in Mozilla Firefox's Security Block-lists, Allow-lists, and other State component. This issue affects versions prior to Firefox 153.5.1-1.oe2403sp4 and was addressed in Firefox 158.0.1 and related ESR and Thunderbird versions. The vulnerability has a CVSS 3.1 base score of 5.4, indicating a medium severity level. No known exploits are reported in the wild.
A security vulnerability in GNU Emacs before version 29.1-12.oe2403sp4 allows OS command injection via a filename due to an incomplete list of disallowed inputs in tramp-user-regexp. This issue is a regression from an incomplete fix for a previous vulnerability (CVE-2026-79992).
A heap out-of-bounds (OOB) write vulnerability exists in the Mutt email client in the convert_file_from_to() function. This flaw can be triggered via a crafted Content-Type header when an email is used as a template. The issue affects versions prior to 2.3.2-2.oe2403sp4 and has a low severity rating.
xdg-dbus-proxy versions before 0.1.2-3.oe2403sp4 contain a vulnerability that allows bypassing message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. This flaw can be exploited by a malicious or compromised Flatpak app to execute arbitrary code outside its sandbox. The issue arises from incorrect message filtering implementation. A fix is available in version 0.1.2-3.oe2403sp4.