CVE-2026-89707

In the Linux kernel, the following vulnerability has been resolved: nfsd: release path refs on followdown error nfsdcrossmnt initializes a local struct path with mntget and dget before calling followdown. On a negative return the error arm jumps to out without releasing those references: err =...

rclone: Incomplete path validation allows backend root escape in serve restic

Summary rclone serve restic does not correctly reject URL paths beginning with ../. On affected backends, an attacker who can access the REST endpoint can read, create, overwrite, or delete objects outside the path configured by the operator. The issue affects rclone v1.40 through rclone v1.74.4...

PT-2013-4018 · Google · Google Chrome

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 29.0.1547.57 Description: The issue arises from the FilePath::ReferencesParent function in files/file path.cc, which does not properly handle pathname components composed entirely of . dot and whitespace...

Fedora Core 10 FEDORA-2009-7750 (mediawiki)

The remote host is missing an update to mediawiki announced via advisory FEDORA-2009-7750. OpenVAS Vulnerability Test $Id: fcore20097750.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-7750 mediawiki Authors: Thomas Reinke Copyright: Copyright c 200...

Fedora 11 : mediawiki-1.15.1-48.fc11 (2009-7785)

This update upgrades mediawiki code to 1.15.1 and fixes some path references. Upstream comments: This is a security and bugfix release of MediaWiki 1.15.1 and 1.14.1. A cross-site scripting XSS vulnerability was discovered. Only versions 1.14.0, 1.15.0 and release candidates for those releases ar...