ROOT-OS-UBUNTU-2204-CVE-2026-23262 CVE-2026-23262 in linux - Patched by Root

Root has patched CVE-2026-23262 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2025-68168 CVE-2025-68168 in linux - Patched by Root

Root has patched CVE-2025-68168 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2026-64270 CVE-2026-64270 in linux - Patched by Root

Root has patched CVE-2026-64270 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

CVE-2026-107935 Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose

A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system...

Security update for grafana, system-user-grafana

This update for grafana, system-user-grafana fixes the following issues: Update to version 12.4.10: Security: CVE-2026-17183: Fix exposing data accessible through Grafana's configured datasource credentials bsc1275934 CVE-2026-2303: Drop dependency on vulnerable go.mongodb.org/mongo-driver...

SUSE-SU-2026:4600-1 Security update for grafana, system-user-grafana

This update for grafana, system-user-grafana fixes the following issues: - Update to version 12.4.10: Security: CVE-2026-17183: Fix exposing data accessible through Grafana's configured datasource credentials bsc1275934 CVE-2026-2303: Drop dependency on vulnerable go.mongodb.org/mongo-driver...

USN-8887-3: Linux kernel vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory...

USN-8903-2 linux-gke, linux-gkeop, linux-ibm, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - x86 architecture; - Intel NPU Driver; - Auxiliary...

USN-8903-2: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - x86 architecture; - Intel NPU Driver; - Auxiliary...

USN-8905-2 linux-gcp vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - x86 architecture; - Intel NPU Driver; - Auxiliary...

ROOT-OS-DEBIAN-12-CVE-2025-10911 CVE-2025-10911 in libxslt - Patched by Root

Root has patched CVE-2025-10911 in the libxslt package for Root:Debian:12. Multiple fixed versions available...

santa

Santa !NOTE A partir de 2025, Santa ya no cuenta con el mantenimiento de Google. Animamos a los usuarios actuales a migrar a un fork de Santa que se mantenga activamente, como https://github.com/northpolesec/santa. Santa es un sistema de autorización de acceso a binarios y archivos para macOS...

golismero

¿Qué es GoLismero? GoLismero es un marco de código abierto para pruebas de seguridad. Actualmente está orientado a la seguridad web, pero puede ampliarse fácilmente a otros tipos de escaneos. Las características más interesantes del marco son: Independencia real de plataforma. Probado en Windows,...

ROOT-OS-DEBIAN-12-CVE-2026-3644 CVE-2026-3644 in python3-defaults - Patched by Root

Root has patched CVE-2026-3644 in the python3-defaults package for Root:Debian:12. Multiple fixed versions available...

CVE-2026-79363

Cloudron 9.1.7 and 9.2 contain a stored cross-site scripting XSS vulnerability in the Branding Footer feature. An authenticated administrator can store crafted HTML containing JavaScript event handlers in the Footer setting. The stored value is rendered without sufficient sanitization on the publ...

ROS-20261009-73-0549

The vulnerability of the lowpaniphcmcastctxaddrcompress function in the net/6lowpan/iphc.c module of the Linux kernel’s networking functions is related to a single-shift error. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20261009-73-0465

The vulnerability of the acpiprocessorerratapiix4 function in the drivers/acpi/acpiprocessor.c file of the ACPI driver an extended configuration and power management interface for the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a...

ROS-20261009-73-0321

The vulnerability of the agpamd64probe function in the drivers/char/agp/amd64-agp.c file of the Linux kernel driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20261009-73-0290

The vulnerability in the drivers/net/ethernet/xscale/ixp4xxeth.c component of the Linux kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20261009-73-0281

The vulnerability of the tegrachanneltryformat function in the drivers/staging/media/tegra-video/vi.c file of the Linux kernel’s media data preparation driver is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...