DEBIAN-CVE-2026-48107

Russh is a Rust SSH client & server library. From version 0.37.0 to before version 0.61.0, in the russh client keyboard-interactive authentication path, a malicious SSH server could send a USERAUTHINFOREQUEST with an attacker-controlled prompt count, and the client would use that raw count direct...

SUSE SLED15 / SLES15 Security Update : gnome-settings-daemon, gnome-shell (SUSE-SU-2020:3132-1)

This update for gnome-settings-daemon, gnome-shell fixes the following issues : gnome-settings-daemon : Add support for recent UCM related changes in ALSA and PulseAudio. jscSLE-16518 Don't warn when a default source or sink is missing and the PulseAudio daemon is restarting. jscSLE-16518 Don't...

openSUSE Security Update : gnome-settings-daemon / gnome-shell (openSUSE-2020-1861)

This update for gnome-settings-daemon, gnome-shell fixes the following issues : gnome-settings-daemon : - Add support for recent UCM related changes in ALSA and PulseAudio. jscSLE-16518 - Don't warn when a default source or sink is missing and the PulseAudio daemon is restarting. jscSLE-16518 -...

polkit - Temporary auth Hijacking via PID Reuse and Non-atomic Fork

polkit - Temporary auth Hijacking via PID Reuse and Non-atomic Fork / When a non-root user attempts to e.g. control systemd units in the system instance from an active session over DBus, the access is gated by a polkit policy that requires "authadminkeep" auth. This results in an auth prompt bein...

polkit - Temporary auth Hijacking via PID Reuse and Non-atomic Fork

/ When a non-root user attempts to e.g. control systemd units in the system instance from an active session over DBus, the access is gated by a polkit policy that requires "authadminkeep" auth. This results in an auth prompt being shown to the user, asking the user to confirm the action by enteri...

PT-2017-16502

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 52 Thunderbird versions prior to 52 Description A denial of service issue exists where a malicious site can trigger a modal authentication prompt repeatedly, causing the browser UI to become non-responsive and requiri...