<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 02 Oct 2026 23:53:29 +0000</lastBuildDate>
    <item>
      <title>ALSA-2021:4381 — Moderate: GNOME security, bug fix, and enhancement update</title>
      <link>https://cve.radiocsirt.org/vuln/alsa-2021:4381</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; AlmaLinux:8: LibRaw, AlmaLinux:8: LibRaw-devel, AlmaLinux:8: accountsservice, AlmaLinux:8: accountsservice-devel, AlmaLinux:8: accountsservice-libs, AlmaLinux:8: gdm, AlmaLinux:8: gnome-autoar, AlmaLinux:8: gnome-calculator, AlmaLinux:8: gnome-classic-session, AlmaLinux:8: gnome-control-center and 47 more&lt;/p&gt;
&lt;p&gt;GNOME is the default desktop environment of AlmaLinux.&lt;/p&gt;
&lt;p&gt;The following packages have been upgraded to a later upstream version: gdm (40.0), webkit2gtk3 (2.32.3). (BZ#1909300)&lt;/p&gt;
&lt;p&gt;Security Fix(es):&lt;/p&gt;
&lt;p&gt;* webkitgtk: Use-after-free in AudioSourceProviderGStreamer leading to arbitrary code execution (CVE-2020-13558)&lt;/p&gt;
&lt;p&gt;* LibRaw: Stack buffer overflow in LibRaw::identify_process_dng_fields() in identify.cpp (CVE-2020-24870)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2020-27918)&lt;/p&gt;
&lt;p&gt;* webkitgtk: IFrame sandboxing policy violation (CVE-2021-1765)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2021-1788)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Type confusion issue leading to arbitrary code execution (CVE-2021-1789)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Access to restricted ports on arbitrary servers via port redirection (CVE-2021-1799)&lt;/p&gt;
&lt;p&gt;* webkitgtk: IFrame sandboxing policy violation (CVE-2021-1801)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2021-1844)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Logic issue leading to arbitrary code execution (CVE-2021-1870)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Logic issue leading to arbitrary code execution (CVE-2021-1871)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Use-after-free in ImageLoader dispatchPendingErrorEvent leading to information leak and possibly code execution (CVE-2021-21775)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Use-after-free in WebCore::GraphicsContext leading to information leak and possibly code execution (CVE-2021-21779)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Use-after-free in fireEventListeners leading to arbitrary code execution…&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; AlmaLinux:8: LibRaw, AlmaLinux:8: LibRaw-devel, AlmaLinux:8: accountsservice, AlmaLinux:8: accountsservice-devel, AlmaLinux:8: accountsservice-libs, AlmaLinux:8: gdm, AlmaLinux:8: gnome-autoar, AlmaLinux:8: gnome-calculator, AlmaLinux:8: gnome-classic-session, AlmaLinux:8: gnome-control-center and 47 more&lt;/p&gt;
&lt;p&gt;GNOME is the default desktop environment of AlmaLinux.&lt;/p&gt;
&lt;p&gt;The following packages have been upgraded to a later upstream version: gdm (40.0), webkit2gtk3 (2.32.3). (BZ#1909300)&lt;/p&gt;
&lt;p&gt;Security Fix(es):&lt;/p&gt;
&lt;p&gt;* webkitgtk: Use-after-free in AudioSourceProviderGStreamer leading to arbitrary code execution (CVE-2020-13558)&lt;/p&gt;
&lt;p&gt;* LibRaw: Stack buffer overflow in LibRaw::identify_process_dng_fields() in identify.cpp (CVE-2020-24870)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2020-27918)&lt;/p&gt;
&lt;p&gt;* webkitgtk: IFrame sandboxing policy violation (CVE-2021-1765)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2021-1788)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Type confusion issue leading to arbitrary code execution (CVE-2021-1789)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Access to restricted ports on arbitrary servers via port redirection (CVE-2021-1799)&lt;/p&gt;
&lt;p&gt;* webkitgtk: IFrame sandboxing policy violation (CVE-2021-1801)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2021-1844)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Logic issue leading to arbitrary code execution (CVE-2021-1870)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Logic issue leading to arbitrary code execution (CVE-2021-1871)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Use-after-free in ImageLoader dispatchPendingErrorEvent leading to information leak and possibly code execution (CVE-2021-21775)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Use-after-free in WebCore::GraphicsContext leading to information leak and possibly code execution (CVE-2021-21779)&lt;/p&gt;
&lt;p&gt;* webkitgtk: Use-after-free in fireEventListeners leading to arbitrary code execution…&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/alsa-2021:4381</guid>
    </item>
    <item>
      <title>bdu:2021-01940</title>
      <link>https://cve.radiocsirt.org/vuln/bdu:2021-01940</link>
      <description>bdu:2021-01940</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/bdu:2021-01940</guid>
    </item>
    <item>
      <title>certfr-2021-avi-072 — De multiples vulnérabilités ont été découvertes dans les produits Apple.
Certaines d'entre elles permettent à un attaqu…</title>
      <link>https://cve.radiocsirt.org/vuln/certfr-2021-avi-072</link>
      <description>certfr-2021-avi-072</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/certfr-2021-avi-072</guid>
    </item>
    <item>
      <title>EUVD-2026-256005</title>
      <link>https://cve.radiocsirt.org/vuln/euvd-2026-256005</link>
      <description>EUVD-2026-256005</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/euvd-2026-256005</guid>
    </item>
    <item>
      <title>fkie_cve-2021-1871</title>
      <link>https://cve.radiocsirt.org/vuln/fkie_cve-2021-1871</link>
      <description>&lt;p&gt;A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/fkie_cve-2021-1871</guid>
    </item>
    <item>
      <title>GHSA-hvr3-8pvc-577j</title>
      <link>https://cve.radiocsirt.org/vuln/ghsa-hvr3-8pvc-577j</link>
      <description>&lt;p&gt;A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ghsa-hvr3-8pvc-577j</guid>
    </item>
    <item>
      <title>gsd-2021-1871</title>
      <link>https://cve.radiocsirt.org/vuln/gsd-2021-1871</link>
      <description>gsd-2021-1871</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/gsd-2021-1871</guid>
    </item>
    <item>
      <title>openSUSE-SU-2021:0637-1 — Security update for webkit2gtk3</title>
      <link>https://cve.radiocsirt.org/vuln/opensuse-su-2021:0637-1</link>
      <description>&lt;p&gt;Security update for webkit2gtk3&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Security update for webkit2gtk3&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/opensuse-su-2021:0637-1</guid>
    </item>
    <item>
      <title>RHSA-2025:10364 — Red Hat Security Advisory: webkitgtk4 security update</title>
      <link>https://cve.radiocsirt.org/vuln/rhsa-2025:10364</link>
      <description>&lt;p&gt;webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents webkitgtk: Logic issue may lead to arbitrary code execution webkitgtk: Memory corruption may lead to arbitrary code execution webkitgtk: Logic issue may lead to cross site scripting webkitgtk: Memory corruption may lead to arbitrary code execution webkitgtk: Memory corruption may lead to arbitrary code execution webkitgtk: Input validation issue may lead to cross site scripting webkitgtk: Logic issue may lead to arbitrary code execution webkitgtk: Command injection in web inspector webkitgtk: Use-after-free may lead to application termination or arbitrary code execution webkitgtk: Out-of-bounds read may lead to unexpected application termination or arbitrary code execution webkitgtk: Use-after-free may lead to application termination or arbitrary code execution webkitgtk: Access issue in content security policy webkitgtk: A logic issue may lead to cross site scripting webkitgtk: use after free issue may lead to arbitrary code execution webkitgtk: type confusion may lead to arbitrary code execution webkitgtk: use-after-free may lead to arbitrary code execution webkitgtk: input validation issue may lead to a cross site scripting webkitgtk: out-of-bounds write may lead to code execution webkitgtk: use-after-free may lead to arbitrary code execution webkitgtk: Use-after-free in AudioSourceProviderGStreamer leading to arbitrary code execution webkitgtk: use-after-free may lead to…&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents webkitgtk: Logic issue may lead to arbitrary code execution webkitgtk: Memory corruption may lead to arbitrary code execution webkitgtk: Logic issue may lead to cross site scripting webkitgtk: Memory corruption may lead to arbitrary code execution webkitgtk: Memory corruption may lead to arbitrary code execution webkitgtk: Input validation issue may lead to cross site scripting webkitgtk: Logic issue may lead to arbitrary code execution webkitgtk: Command injection in web inspector webkitgtk: Use-after-free may lead to application termination or arbitrary code execution webkitgtk: Out-of-bounds read may lead to unexpected application termination or arbitrary code execution webkitgtk: Use-after-free may lead to application termination or arbitrary code execution webkitgtk: Access issue in content security policy webkitgtk: A logic issue may lead to cross site scripting webkitgtk: use after free issue may lead to arbitrary code execution webkitgtk: type confusion may lead to arbitrary code execution webkitgtk: use-after-free may lead to arbitrary code execution webkitgtk: input validation issue may lead to a cross site scripting webkitgtk: out-of-bounds write may lead to code execution webkitgtk: use-after-free may lead to arbitrary code execution webkitgtk: Use-after-free in AudioSourceProviderGStreamer leading to arbitrary code execution webkitgtk: use-after-free may lead to…&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/rhsa-2025:10364</guid>
    </item>
    <item>
      <title>SUSE-SU-2021:1430-1 — Security update for webkit2gtk3</title>
      <link>https://cve.radiocsirt.org/vuln/suse-su-2021:1430-1</link>
      <description>&lt;p&gt;Security update for webkit2gtk3&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Security update for webkit2gtk3&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/suse-su-2021:1430-1</guid>
    </item>
    <item>
      <title>UBUNTU-CVE-2021-1871</title>
      <link>https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-1871</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:16.04:LTS: qtwebkit-opensource-src, Ubuntu:16.04:LTS: webkit2gtk, Ubuntu:16.04:LTS: qtwebkit-source, Ubuntu:16.04:LTS: webkitgtk, Ubuntu:18.04:LTS: webkit2gtk, Ubuntu:18.04:LTS: qtwebkit-opensource-src, Ubuntu:18.04:LTS: qtwebkit-source, Ubuntu:18.04:LTS: webkitgtk, Ubuntu:20.04:LTS: webkit2gtk, Ubuntu:20.04:LTS: qtwebkit-opensource-src and 4 more&lt;/p&gt;
&lt;p&gt;A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:16.04:LTS: qtwebkit-opensource-src, Ubuntu:16.04:LTS: webkit2gtk, Ubuntu:16.04:LTS: qtwebkit-source, Ubuntu:16.04:LTS: webkitgtk, Ubuntu:18.04:LTS: webkit2gtk, Ubuntu:18.04:LTS: qtwebkit-opensource-src, Ubuntu:18.04:LTS: qtwebkit-source, Ubuntu:18.04:LTS: webkitgtk, Ubuntu:20.04:LTS: webkit2gtk, Ubuntu:20.04:LTS: qtwebkit-opensource-src and 4 more&lt;/p&gt;
&lt;p&gt;A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-1871</guid>
    </item>
  </channel>
</rss>
