Vulnerabilities

An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply…

A flaw was found in PackageKit.

A flaw was found in NetworkManager-l2tp.

Incomplete fix for CVE-2024-1929 The problem with CVE-2024-1929 was that the dnf5 D-Bus daemon accepted arbitrary configuration parameters from unprivileged users, which allowed a local root exploit by tricking the daemo…

Local Root Exploit via Configuration Dictionary in dnf5daemon-server before 5.1.17 allows a malicious user to impact Confidentiality and Integrity via Configuration Dictionary.

No Limit on Number of Open Sessions / Bad Session Close Behaviour in dnf5daemon-server before 5.1.17 allows a malicious user to impact Availability via No Limit on Number of Open Sessions.

A flaw was found in ofono, an Open Source Telephony on Linux.

A flaw was found in ofono, an Open Source Telephony on Linux.

A flaw was found in ofono, an Open Source Telephony on Linux.

A flaw was found in ofono, an Open Source Telephony on Linux.

A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which may result in a denial of service and invalid memory accesses.

A use-after-free flaw was found in the Linux kernel's Memory Management subsystem when a user wins two races at the same time with a fail in the mas_prev_slot function.

An untrusted search path vulnerability was found in Yarn.

An integer overflow was found in the __vsyslog_internal function of the glibc library.

An off-by-one heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library.

A heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library.

A security vulnerability has been identified in the pkcs11-provider, which is associated with Public-Key Cryptography Standards (PKCS#11).

A race condition was found in the Linux Kernel.

The Mock software contains a vulnerability wherein an attacker could potentially exploit privilege escalation, enabling the execution of arbitrary code with root user privileges.

A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo.

An out-of-bounds write issue has been discovered in the backspace handling of the checkType() function in etc.c within the W3M application.

Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the tcpedit_dlt_cleanup() function within plugins/dlt_plugins.c.

A vulnerability was found in OpenImageIO, where a heap buffer overflow exists in the src/gif.imageio/gifinput.cpp file.

An out-of-bounds memory access flaw was found in the io_uring SQ/CQ rings functionality in the Linux kernel.

A null pointer dereference flaw was found in the nft_inner.c functionality of netfilter in the Linux kernel.