Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout

SummaryThe OIDC back-channel logout endpoint is unauthenticated by design, because the identity provider calls it without a browser session. Before checking whether the submitted logout token was genuine, the handler fetched the provider's discovery document and its signing keys over the network,...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the vub300enablesdioirq function calling a blocking operation in a non-TASKRUNNING state, which could lead t...

UBUNTU-CVE-2022-50371

In the Linux kernel, the following vulnerability has been resolved: led: qcom-lpg: Fix sleeping in atomic lpgbrighnessset function can sleep, while led's brightnessset callback must be non-blocking. Change LPG driver to use brightnesssetblocking instead. BUG: sleeping function called from invalid...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a blocking call issue in the ima component in the RCU read critical section...

PT-2024-26111

Name of the Vulnerable Software and Affected Versions LNbits versions prior to 0.12.6 Description Paying invoices in Eclair that do not get settled within the internal timeout about 30s can lead to a payment being considered failed, even though it may still be in flight. This issue can result in ...