Aggregator

USN-7817-1: WebKitGTK vulnerabilities

Ubuntu Security Advisories
2 weeks ago
Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary code execution.

dovecot-2.4.1-6.fc44

Fedora Security Advisories
2 weeks ago
FEDORA-2025-d5eb72768a Packages in this update:
  • dovecot-2.4.1-6.fc44
Update description:

Automatic update for dovecot-2.4.1-6.fc44.

Changelog * Thu Oct 9 2025 Michal Hlavinka <mhlavink@redhat.com> - 1:2.4.1-6 - fix CVE-2025-30189: users would end up overwriting each other in cache (rhbz#2402122)

rubygem-actioncable-8.0.3-1.fc44 rubygem-actionmailbox-8.0.3-1.fc44 rubygem-actionmailer-8.0.3-1.fc44 rubygem-actionpack-8.0.3-1.fc44 rubygem-actiontext-8.0.3-1.fc44 rubygem-actionview-8.0.3-1.fc44 rubygem-activejob-8.0.3-1.fc44 rubygem-activemodel-8.0.3…

Fedora Security Advisories
2 weeks ago
FEDORA-2025-6e5c27d218 Packages in this update:
  • rubygem-actioncable-8.0.3-1.fc44
  • rubygem-actionmailbox-8.0.3-1.fc44
  • rubygem-actionmailer-8.0.3-1.fc44
  • rubygem-actionpack-8.0.3-1.fc44
  • rubygem-actiontext-8.0.3-1.fc44
  • rubygem-actionview-8.0.3-1.fc44
  • rubygem-activejob-8.0.3-1.fc44
  • rubygem-activemodel-8.0.3-1.fc44
  • rubygem-activerecord-8.0.3-1.fc44
  • rubygem-activestorage-8.0.3-1.fc44
  • rubygem-activesupport-8.0.3-1.fc44
  • rubygem-rails-8.0.3-1.fc44
  • rubygem-railties-8.0.3-1.fc44
Update description:

Update to Ruby on Rails 8.0.3

  • Fix CVE-2025-24293: Active Storage allowed transformation methods potentially unsafe
  • Fix CVE-2025-55193: ANSI escape injection in Active Record logging

USN-7816-1: DPDK vulnerability

Ubuntu Security Advisories
2 weeks 1 day ago
It was discovered that DPDK incorrectly handled the mlx5 Ethernet poll mode driver. An attacker could possibly use this issue to obtain sensitive information, or cause the network interface to crash, resulting in a denial of service.