Category Archives: Advisories

USN-7436-1: WebKitGTK vulnerabilities

Read Time:15 Second

Several security issues were discovered in the WebKitGTK Web and JavaScript
engines. If a user were tricked into viewing a malicious website, a remote
attacker could exploit a variety of issues related to web browser security,
including cross-site scripting attacks, denial of service attacks, and
arbitrary code execution.

Read More

ruby-3.3.8-19.fc40

Read Time:19 Second

FEDORA-2025-9bef972bb9

Packages in this update:

ruby-3.3.8-19.fc40

Update description:

Upgrade to Ruby 3.3.8.

CVE-2025-25186: Fix Net::IMAP vulnerable to possible DoS by memory exhaustion
Resolves: rhbz#2345556
CVE-2025-27219: Denial of Service in CGI::Cookie.parse
Resolves: rhbz#2357516
CVE-2025-27221: userinfo leakage in URI#join, URI#merge and URI#+

Read More