Threat database

A security vulnerability (CVE-2025-5024) in GNOME Remote Desktop allows uncontrolled resource consumption due to malformed RDP PDUs. This affects the GNOME remote desktop and screen sharing service in Red Hat Enterprise Linux 8. A security update is available to address this issue.

Multiple security issues were addressed in the go1.25-1.25rc2-1.1 package for openSUSE Tumbleweed. These fixes are included in the GA media release of this package by SUSE Product Security Team. No specific details about the vulnerabilities or their impact are provided.

Multiple security issues affecting the go1.24-1.24.4-1.1 package on the GA media of openSUSE Tumbleweed have been fixed by the SUSE Product Security Team. The specific vulnerabilities are identified by CVE-2025-0913 and related CVEs. No detailed technical information or CVSS scores are provided.

Multiple security issues were addressed in the curl-8.14.1-4.1 package included in the GA media of openSUSE Tumbleweed. The update fixes these vulnerabilities to improve the security posture of the affected software.

Multiple security vulnerabilities have been identified in the libsoup HTTP client and server library for GNOME, affecting Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. These include heap buffer over-read, denial of service via websocket server, out-of-bounds read causing crashes, and integer underflow leading to denial of service. Red Hat has released security updates addressing these issues.

CVE-2025-4948 is an integer underflow vulnerability in the soup_multipart_new_from_message() function of the libsoup HTTP library. This flaw occurs when processing specially crafted multipart messages, causing an internal calculation to underflow. The resulting invalid memory access can crash the program, leading to a denial-of-service (DoS) condition for applications or servers using libsoup.

Multiple security issues were addressed in the go1.24-1.24.3-1.1 package for openSUSE Tumbleweed. These fixes are included in the GA media release of this package by the SUSE Product Security Team. No specific vulnerabilities or impacts are detailed in the available information.

CVE-2025-4373 is a medium severity vulnerability in GLib involving an integer overflow in the g_string_insert_unichar() function. This overflow can cause a buffer underwrite when a large insertion position is used. The flaw affects GLib as used in Red Hat Enterprise Linux 10 and related products. A security update addressing this issue has been released by Red Hat.

This is a security update for Ruby provided by the SUSE Product Security Team, functionally equivalent to Red Hat advisory RHSA-2025:4493. No specific vulnerability details, affected versions, or patch information are provided in the input data.

Multiple security vulnerabilities have been identified in the libsoup HTTP client and server library for GNOME, affecting Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. These include out-of-bounds reads, denial of service via overlapping Range headers, double free, NULL pointer dereference, information disclosure through improper Authorization header forwarding, and memory leaks. Red Hat has issued an important security advisory with updates addressing these issues.

Multiple security vulnerabilities have been identified in WebKitGTK, the GTK port of the WebKit web rendering engine, affecting Red Hat Enterprise Linux 8. These include issues that may cause unexpected process crashes, denial-of-service conditions, cross-origin data exfiltration, and cross-site scripting attacks via malicious web content or iframes. Red Hat has issued an important security advisory with updates to address these vulnerabilities.

CVE-2025-32911 is a critical use-after-free vulnerability in libsoup's soup_message_headers_get_content_disposition() function. It allows a malicious HTTP client to cause memory corruption in the libsoup server, potentially leading to severe impacts including confidentiality, integrity, and availability loss. Red Hat has issued a security advisory with an update that fixes this and other related vulnerabilities in libsoup for Red Hat Enterprise Linux 7 Extended Lifecycle Support.

CVE-2025-32914 is an out-of-bounds read vulnerability in the libsoup library, specifically in the soup_multipart_new_from_message() function. This flaw allows a malicious HTTP client to cause the libsoup server to read memory out of bounds, potentially leading to a crash or process exit. The vulnerability has a CVSS score of 7.4, indicating high severity, with impact on confidentiality and availability. Red Hat has issued an important security advisory with updates addressing this and related libsoup vulnerabilities. The flaw affects Red Hat Enterprise Linux 7 Extended Lifecycle Support versions and is fixed in updated packages.