CVE-2026-81870

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...

USN-8776-1: python-cryptography vulnerabilities

It was discovered that python-cryptography incorrectly accepted objects with immutable buffers when performing certain cipher operations. This would result in corrupted output, contrary to expectations. This issue only affected Ubuntu 18.04 LTS. CVE-2023-23931 It was discovered that...

USN-8776-1 python-cryptography vulnerabilities

It was discovered that python-cryptography incorrectly accepted objects with immutable buffers when performing certain cipher operations. This would result in corrupted output, contrary to expectations. This issue only affected Ubuntu 18.04 LTS. CVE-2023-23931 It was discovered that...

CVE-2026-82410 Pocketbase: Unhandled panic in worker goroutines

Pocketbase is an open source web backend written in go. Prior to 0.22.48 and 0.39.7, PocketBase's panic-recovery middleware covers regular request handling but not internal child and worker goroutines. A panic in one of these internal goroutines can escape recovery and terminate the server proces...

CVE-2026-82410

Pocketbase , an open-source web backend written in Go, is vulnerable to a denial of service due to its panic-recovery middleware failing to cover internal child and worker goroutines. A panic in one of these internal goroutines can escape recovery and terminate the server process . The fix, intro...

CVE-2026-89875

In the Linux kernel, the following vulnerability has been resolved: media: ti: vpe: quiesce overflow recovery before freeing streams The VIP overflow recovery worker is armed from the hardirq handler when a FIFO overflow is detected, and the list-complete path looks the stream up through the VPDM...

YellowKey-BitLocker-CVE-2026-45585

YellowKey BitLocker YellowKey BitLocker Recovery Tool respalda las claves de recuperación de BitLocker y audita CVE-2026-45585 en Windows 10/11. Las búsquedas de bitlocker yellowkey , yellowkey bitlocker , yellowkey github y yellowkey vulnerability aterrizan aquí. CLI + GUI portátil para volúmene...

CVE-2026-89875 media: ti: vpe: quiesce overflow recovery before freeing streams

In the Linux kernel, the following vulnerability has been resolved: media: ti: vpe: quiesce overflow recovery before freeing streams The VIP overflow recovery worker is armed from the hardirq handler when a FIFO overflow is detected, and the list-complete path looks the stream up through the VPDM...

CVE-2026-89875

This is a use-after-free vulnerability in the Linux kernel's Texas Instruments VIP (Video Imaging Processors) driver, specifically the vpe media subsystem. The root cause is that vip_stop_streaming() masks and clears per-list IRQs but does not synchronize the hardirq handler or disable the recove...

CVE-2026-89875 media: ti: vpe: quiesce overflow recovery before freeing streams

In the Linux kernel, the following vulnerability has been resolved: media: ti: vpe: quiesce overflow recovery before freeing streams The VIP overflow recovery worker is armed from the hardirq handler when a FIFO overflow is detected, and the list-complete path looks the stream up through the VPDM...

EEF-CVE-2026-88255 mpp Tempo keys its pre-broadcast dedup reserve on the caller-supplied transaction encoding, so a re-encoded signed transaction reserves a second slot

Summary Improper Validation of Unsafe Equivalence in Input in ZenHive mpp allows an unauthenticated remote client to pass the Tempo duplicate-submission gate twice with one signed transaction. MPP.Methods.Tempo reserves the pre-broadcast dedup slot on the caller-supplied hex in reservehashatomic/...

PT-2026-93817

Name of the Vulnerable Software and Affected Versions Pocketbase versions prior to 0.22.48 Pocketbase versions prior to 0.39.7 Description The panic-recovery middleware handles regular requests but does not cover internal child and worker goroutines. A panic within these internal goroutines can...

CVE-2026-82410: Uncaught Exception

Pocketbase is an open source web backend written in go. Prior to 0.22.48 and 0.39.7, PocketBase's panic-recovery middleware covers regular request handling but not internal child and worker goroutines. A panic in one of these internal goroutines can escape recovery and terminate the server proces...

PT-2026-93516

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the media TI VPE component where the vip stop streaming function fails to synchronize the hardirq handler or disable recovery work. This can lead to a use-after-free...

CVE-2026-89838: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: f2fs: limit recovery filename logging to stored length F2FS stores recovery filenames as a length plus a fixed-size iname buffer. The buffer is not NUL-terminated, but recoverinode and recoverdentry print it with %s. For a 255-by...

CVE-2026-89850: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Don't query firmware state while chip is down qla2x00fwstateshow initializes rval to QLAFUNCTIONFAILED and jumps to the out: label when the chip is down or EEH is busy. The out: block then re-issued...

CVE-2026-89875: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: ti: vpe: quiesce overflow recovery before freeing streams The VIP overflow recovery worker is armed from the hardirq handler when a FIFO overflow is detected, and the list-complete path looks the stream up through the VPDM...

Linux Distros Unpatched Vulnerability : CVE-2026-89838

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - f2fs: limit recovery filename logging to stored length F2FS stores recovery filenames as a length plus a fixed-size iname buffer. The buffer is not...

Linux Distros Unpatched Vulnerability : CVE-2026-89875

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: ti: vpe: quiesce overflow recovery before freeing streams The VIP overflow recovery worker is armed from the hardirq handler when a FIFO overflow is...

[SECURITY] [DSA 6499-1] cjose security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6499-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 15, 2026 https://www.debian.org/security/faq -...