USN-8492-5: Linux kernel (FIPS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; -...

EulerOS 2.0 SP12 : firewalld (EulerOS-SA-2026-2587)

According to the versions of the firewalld packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus Desktop Bus setter...

EulerOS 2.0 SP12 : firewalld (EulerOS-SA-2026-2527)

According to the versions of the firewalld packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus Desktop Bus setter...

The vulnerability of the parser for BLF files in the Wireshark traffic analyzer software allows a hacker to disclose protected information.

The vulnerability of the Wireshark parser for analyzing BLF files related to traffic analysis in computer networks is linked to errors during initialization. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by security measures...

EulerOS 2.0 SP12 : avahi (EulerOS-SA-2026-2579)

According to the versions of the avahi packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. Prior to version 0.9-rc4, any...

CVE-2025-27464

CVE-2025-27464 is part of a XenServer/Citrix Hypervisor set of flaws affecting Windows guest VMs. The root cause is that the XenServer VM Tools for Windows (XenServer VM Tools, Windows) before version 9.4.1 expose devices/facilities without proper security descriptors, enabling an unprivileged gu...

CVE-2026-36027

The Code 27 3D Companion Hub (Build SQ3A.220705.003.A1 , Android 12) contains a vulnerability allowing a physically proximate attacker to execute arbitrary code via USB debugging (ADB) . Because the device ships a userdebug build, an attacker can boot the device into recovery mode and restart adb...

Salt has minion event bus authorization bypass vulnerability

Minion event bus authorization bypass. An attacker with access to a minion key can craft a message which may be able to execute a job on other minions = 3007.0...

Salt vulnerable to arbitrary event injection

Arbitrary event injection on Salt Master. The master's "minionevent" method can be used by and authorized minion to send arbitrary events onto the master's event bus...

PYSEC-2026-1899 Salt has minion event bus authorization bypass vulnerability

Minion event bus authorization bypass. An attacker with access to a minion key can craft a message which may be able to execute a job on other minions = 3007.0...

PYSEC-2026-1897 Salt vulnerable to arbitrary event injection

Arbitrary event injection on Salt Master. The master's "minionevent" method can be used by and authorized minion to send arbitrary events onto the master's event bus...

glib2: Fix of CVE-2026-58016

CVE-2026-58016: fix XML parser state handling for element nesting in D-Bus introspection XML...

SUSE CVE-2026-13882

Race in USB in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

📄 iOS Bluetooth PAN Zero-Cost Ethernet Gateway

A logic flaw in Apple's iOS Bluetooth PAN stack allows an attacker to force an iPhone to display a real "Ethernet" icon and open the core USB port 62078 over Bluetooth without any cable or adapter. The attack costs €0 to execute, while Apple sells the Satechi Multiport Pro V2 adapter for €89.95 t...

The vulnerability of the parse_report_descriptor() function in the USB HID protocol analyzer of Wireshark allows a hacker to induce a service failure.

The vulnerability of the parsereportdescriptor function in the USB HID protocol analyzer of Wireshark, a computer network traffic analyzer, is related to improper management of sequential memory allocation. Exploiting this vulnerability can allow an attacker to cause a service failure...

PackageKit Advanced Vulnerability Assessment with D-Bus and Polkit Security Analysis

This Python tool is an advanced security assessment framework designed to evaluate potential exposure to a PackageKit-related vulnerability scenario by combining version analysis, policy inspection, and D-Bus interaction testing...

[SECURITY] Fedora 43 Update: rust-busd-0.5.0-3.fc43

A D-Bus bus broker implementation...

[SECURITY] Fedora 44 Update: rust-busd-0.5.0-3.fc44

A D-Bus bus broker implementation...

kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture USB audio subsystem. An inconsistency in how USB audio playback and capture streams are handled can lead to an out-of-bounds write to a memory buffer. This can result in a system crash, causing a denial of service for a...

kernel: ALSA: usb-audio: Add sanity check for OOB writes at silencing

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture USB audio subsystem. An inconsistency in how USB audio playback and capture streams are handled can lead to an out-of-bounds write to a memory buffer. This can result in a system crash, causing a denial of service for a...