Summary
[0.4.5-3]
- Fix CVE-2025-3931
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | yggdrasil | 0:0.4.5-3.el10_0 |
| Oracle Linux · 10 | yggdrasil-devel | 0:0.4.5-3.el10_0 |
Vulnerabilities 2
-
High 7.8
Yggdrasil: local privilege escalation in yggdrasil
A flaw was found in Yggdrasil, which acts as a system broker, allowing the processes to communicate to other children's "worker" processes through the DBus component. Yggdrasil creates a DBus method to dispatch messages to workers. However, it misses authenti…
-
Medium 6.1
Sensitive headers incorrectly sent after cross-domain redirect in net/http
The HTTP client drops sensitive headers after following a cross-domain redirect. For example, a request to a.com/ containing an Authorization header which is redirected to b.com/ will not send that header to b.com. In the event that the client received a subs…