Mozilla多款产品 安全漏洞

Mozilla Firefox, among others, are products of the American Mozilla Foundation. Mozilla Firefox is an open-source web browser. Mozilla Firefox ESR is a extended support version of Firefox the web browser. Mozilla Thunderbird is an email client software that emerged independently from the Mozilla...

OPENSUSE-SU-2026:10594-1 openbao-2.5.3-1.1 on GA media

These are all security issues fixed in the openbao-2.5.3-1.1 package on the GA media of openSUSE Tumbleweed...

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-010943)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010943 advisory. In the Linux kernel, the following vulnerability has been resolved: ata: patavia: Force PIO for ATAPI devices on VT6415/VT6330 The controller has a hardware bug that...

OPENSUSE-SU-2026:10585-1 GraphicsMagick-1.3.46-6.1 on GA media

These are all security issues fixed in the GraphicsMagick-1.3.46-6.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10595-1 php8-8.5.5-1.1 on GA media

These are all security issues fixed in the php8-8.5.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10586-1 ImageMagick-7.1.2.19-2.1 on GA media

These are all security issues fixed in the ImageMagick-7.1.2.19-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10591-1 kissfft-131.2.0-2.1 on GA media

These are all security issues fixed in the kissfft-131.2.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10598-1 libtree-sitter0_26-0.26.8-1.1 on GA media

These are all security issues fixed in the libtree-sitter026-0.26.8-1.1 package on the GA media of openSUSE Tumbleweed...

Mozilla Thunderbird < 140.10

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 140.10. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-34 advisory. - Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 150, Firefox...

Amazon AWS Encryption SDK 安全漏洞

Amazon AWS Encryption SDK is a development toolkit used by Amazon, Inc., for encryption purposes. Versions of the AWS Encryption SDK prior to 3.3.1 and 4.0.5 contained security vulnerabilities. These vulnerabilities were due to issues with the encryption algorithm, which could allow authenticated...

OPENSUSE-SU-2026:10584-1 rclone-1.73.5-1.1 on GA media

These are all security issues fixed in the rclone-1.73.5-1.1 package on the GA media of openSUSE Tumbleweed...

April 19, 2026—KB5091157 (OS Build 26100.32698) Out-of-band

None None...

OPENSUSE-SU-2026:10580-1 python315-3.15.0~a8-2.1 on GA media

These are all security issues fixed in the python315-3.15.0a8-2.1 package on the GA media of openSUSE Tumbleweed...

April 19, 2026—KB5091571 (OS Build 25398.2276) Out-of-band

None None...

OPENSUSE-SU-2026:10571-1 bouncycastle-1.84-1.1 on GA media

These are all security issues fixed in the bouncycastle-1.84-1.1 package on the GA media of openSUSE Tumbleweed...

RockyLinux 9 : thunderbird (RLSA-2026:8459)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:8459 advisory. libpng: libpng: Arbitrary code execution due to use-after-free vulnerability CVE-2026-33416 libpng: libpng: Information disclosure and denial of service...

CVE-2026-6496 prasathmani TinyFileManager POST Parameter filemanager.php path traversal

A vulnerability was found in prasathmani TinyFileManager up to 2.6. Affected is an unknown function of the file /filemanager.php of the component POST Parameter Handler. The manipulation of the argument file results in path traversal. The attack may be performed from remote. The exploit has been...

USN-8182-1: Rack vulnerabilities

Andrew Lacambra discovered that Rack did not properly parse certain regular expressions. An attacker could possibly use this issue to bypass network security filters. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 25.10. CVE-2026-26961 William T. Nelson...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 : Rack vulnerabilities (USN-8182-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8182-1 advisory. Andrew Lacambra discovered that Rack did not properly parse certain regular...

Mobatek MobaXterm 安全漏洞

Mobatek MobaXterm is a terminal software developed by the French company Mobatek. It integrates an enhanced terminal, X servers, and Unix command sets GNU/Cygwin. The Mobatek MobaXterm Home Edition 26.1 and earlier versions have security vulnerabilities. These vulnerabilities stem from an unknown...