Multiple high-impact security vulnerabilities have been identified and fixed in Mozilla Firefox and Firefox ESR, including privilege escalation, sandbox escapes, use-after-free, incorrect boundary conditions, integer overflows, and mitigation bypasses across various components such as networking, graphics, JavaScript engine, DOM, and storage. These vulnerabilities affect both the standard Firefox and the Extended Support Release (ESR) versions. Fixes are included in Firefox 158 and Firefox ESR 115.43.
Multiple vulnerabilities have been identified in cURL, a client software used for file transfers via protocols such as HTTP and FTP. These issues affect versions prior to 8.23.0. A fix is available in version 8.23.0.
CVE-2024-58391 is a cross-site scripting (XSS) vulnerability in the Frappe framework affecting versions before 14.58.0 and 15.x before 15.4.0. The flaw exists in the printview feature, where parameters are not properly escaped before rendering. This allows remote attackers to craft malicious URLs that inject HTML and execute scripts in the victim's browser when the URL is visited.
Multiple security vulnerabilities have been identified in the 'goose' component of Red Hat Enterprise Linux (RHEL) versions 9 and 10. These include arbitrary command execution via malicious Git configuration, token impersonation due to missing OAuth resource field validation, and denial of service (DoS) through unauthenticated session table leaks and crafted Certificate Revocation Lists. Red Hat has released updates to goose version 1.45 to address these issues in RHEL 9.8.z and 10.2.z. Users are advised to apply these updates after ensuring all prior errata are installed.
Multiple security vulnerabilities have been identified in the python-tornado package included with Red Hat Enterprise Linux 10.0 Extended Update Support. These include an information disclosure flaw due to improper handling of credentials during HTTP redirects, and two denial of service (DoS) vulnerabilities related to uncontrolled gzip decompression memory consumption and memory amplification in multipart parsing. Red Hat has issued an important security advisory with updates addressing these issues.
A critical security vulnerability (CVE-2026-53939) affects the cjose library in Red Hat Enterprise Linux 10. The flaw involves the use of an all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption, which could allow manipulation of encrypted data. Red Hat has released an update to address this issue for multiple architectures and product variants of RHEL 10.
Multiple vulnerabilities have been identified in GitLab, a web application for software version control based on git. These vulnerabilities affect GitLab versions prior to 19.4.2 and version 19.4.2 itself. A fixed version, 19.4.2, has been released to address these issues. The vendor advisory references a Red Hat security advisory related to hardened images RPMs, but does not provide detailed impact or exploitation information specific to GitLab. No known exploits in the wild have been reported.
Multiple vulnerabilities have been identified in MariaDB, a relational database system compatible with MySQL. These vulnerabilities affect versions prior to 10.6.28. A security update addressing these issues is available in version 10.6.28. The Red Hat advisory provides updated packages that include fixes for these vulnerabilities. No known exploits are reported in the wild at this time.
A vulnerability in Keycloak prior to version 26.8.2 allows a realm administrator with the read-only view-clients role to access active primary secrets of confidential clients. These secrets should be restricted but are exposed due to failure to mask sensitive credentials in specific installation provider and client registration endpoints. This exposure enables impersonation of clients and unauthorized access to associated service account permissions. The vulnerability has been fixed in version 26.8.2.
Multiple vulnerabilities have been identified in IBM DB2, a relational database system by IBM. No specific details about the nature, impact, or affected versions of these vulnerabilities are provided in the available data.
Multiple vulnerabilities have been identified in IBM App Connect Enterprise, a product that integrates IBM Integration Bus technologies with cloud-native capabilities. These vulnerabilities affect versions prior to and including 13.0.9.0. A fix is available in version 13.0.9.0.
A vulnerability in datamodel-code-generator versions from 0.59.0 up to 0.81.0 allows an attacker to supply crafted Protobuf schemas that write files outside a temporary directory during processing. This can lead to creation or overwriting of files with Protobuf syntax declarations. The issue requires processing attacker-controlled schemas with Protobuf input support, which depends on grpcio-tools. The vulnerability is fixed in version 0.81.0.
The golang github.com/moby/sys/user package before version 0.4.1 has a vulnerability where it does not sufficiently limit entries when parsing Unix-style user and group database files. This can allow an attacker who supplies a specially crafted file to cause excessive memory consumption, potentially leading to process termination due to out-of-memory conditions. The issue is fixed in version 0.4.1. Mitigation includes avoiding parsing untrusted user or group database files or validating and limiting such input before parsing.
A vulnerability in the Expat XML parser allows a remote attacker to cause a heap buffer over-read via repeated parse buffer operations with unvalidated buffer lengths. This can lead to information disclosure by leaking adjacent heap memory, potentially aiding in bypassing security mitigations like ASLR, or cause a denial of service by crashing the application. The vulnerability affects Red Hat Enterprise Linux environments where Expat is used to process untrusted XML inputs. A security update addressing this issue is available in Red Hat Hardened Images RPMs.
Telegram Desktop versions before 7.2.9 have an IPC record-separator injection vulnerability in the Core::Sandbox component. This flaw allows remote attackers to craft tg:// links with unescaped semicolons to inject OPEN: records. Exploitation can lead to uploading local files, including sensitive tdata session keys, to an attacker-controlled channel, potentially resulting in account takeover.
Multiple vulnerabilities have been identified in IBM SPSS, a comprehensive set of data and predictive analytics tools. The information provided does not specify the nature or impact of these vulnerabilities. There is no explicit patch or remediation information available for IBM SPSS in the provided data. The vendor advisory content references a Red Hat security advisory related to OpenShift Jenkins, which is unrelated to IBM SPSS. No known exploits in the wild have been reported for these vulnerabilities.
Multiple security vulnerabilities affecting the ANGLE component used in Chromium-based browsers such as Google Chrome and Microsoft Edge have been identified. These include use-after-free, out-of-bounds read and write, buffer overflow, type confusion, and uninitialized resource issues. The vulnerabilities are addressed by a security update to the webkit2gtk3 package in Red Hat Enterprise Linux 9. The update is rated as important by Red Hat Product Security.
Ruby handlebars-assets versions prior to 4.7.10 contain a critical vulnerability in the Handlebars.compile() and Handlebars.precompile() functions. These functions accept pre-parsed AST objects but only partially validate certain literal values, allowing an attacker who can supply an object instead of a template string to inject JavaScript expressions. This leads to code execution in the server process when the compiled template is rendered or precompiled output is loaded. The issue is fixed in version 4.7.10.
A vulnerability in ruby-handlebars-assets affects versions including 4.0.0 through 4.7.9, where the Handlebars.precompile() function improperly escapes sequences that terminate an enclosing HTML script element. This can allow an attacker to inject and execute arbitrary markup if attacker-controlled template text is precompiled and embedded directly in an inline script element. The issue is fixed in version 4.7.10.
A stored cross-site scripting (XSS) vulnerability exists in Apache Commons BCEL before version 6.13.0, affecting OpenJDK 8 versions listed. The issue arises when Class2HTML generates web pages from potentially attacker-controlled class files, writing unescaped strings into HTML. This vulnerability allows attackers to inject malicious scripts into generated reports. The vulnerability is fixed in Apache Commons BCEL 6.13.0.