[SECURITY] Fedora 43 Update: gstreamer1-doc-1.26.11-1.fc43

GStreamer documentation...

[SECURITY] Fedora 43 Update: gstreamer1-1.26.11-1.fc43

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

[SECURITY] Fedora 43 Update: rust-1.94.1-1.fc43

Rust is a systems programming language that runs blazingly fast, prevents segfaults, and guarantees thread safety. This package includes the Rust compiler and documentation generator...

[SECURITY] Fedora 43 Update: insight-18.0.50.20260306-2.fc43

Insight is a tight graphical user interface to GDB written in Tcl/Tk. It provides a comprehensive interface that enables users to harness most of GDB's power. It's also probably the only up-to-date UI for the latest GDB version...

CVE-2026-35057 XenForo Stored Cross-Site Scripting via Structured Text Mentions

XenForo before 2.3.10 and before 2.2.19 is vulnerable to stored cross-site scripting XSS in structured text mentions, primarily affecting legacy profile post content. An attacker can inject malicious scripts through crafted mentions that are stored and executed when other users view the content...

PT-2026-29510

Name of the Vulnerable Software and Affected Versions Checkmk versions 2.4.0 through 2.4.0p25 and 2.5.0 through 2.5.0b2 Description Insufficient permission validation exists on multiple REST API Quick Setup endpoints. This allows low-privileged users to perform unauthorized actions or obtain...

The vulnerability of the cifs_demultiplex_thread() function in the fs/smb/client/connect.c module, which is part of the SMB client support in Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the cifsdemultiplexthread function in the fs/smb/client/connect.c module, which is part of the SMB client support in Linux kernel, is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the try_smi_init() function in the drivers/char/ipmi/ipmi_si_intf.c driver for Linux’s alphanumeric devices allows a attacker to cause a service failure.

The vulnerability of the trysmiinit function in the drivers/char/ipmi/ipmisiintf.c file of the Linux operating system’s character device driver module is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-44252

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free issue exists in the btrfs module within the create space info function error path. When kobject init and add fails, the system executes a call chain that leads to space inf...

OpenViking 安全漏洞

OpenViking is an open-source artificial intelligence proxy context database developed by Volcengine. Versions of OpenViking prior to 0.2.14 contained security vulnerabilities. These vulnerabilities stemmed from a lack of authentication in the bot proxy router, allowing unauthorized attackers to...

PT-2026-29626

Name of the Vulnerable Software and Affected Versions CI4MS versions prior to 0.31.0.0 Description CI4MS, a CodeIgniter 4-based CMS, is susceptible to a stored Cross-site Scripting XSS issue within the System Settings – Social Media Management section. The application does not properly sanitize...

The vulnerability of the mt7921_check_offload_capability() function in the drivers/net/wireless/mediatek/mt76/mt7921/init.c file of the Mediatek wireless communication adapter driver for the Linux operating system, which allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the mt7921checkoffloadcapability function in the drivers/net/wireless/mediatek/mt76/mt7921/init.c file of the Mediatek wireless adapter driver for the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this...

Oracle Linux 10 : thunderbird (ELSA-2026-6342)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-6342 advisory. 140.9.0-1.0.1 - Add Oracle prefs 140.9.0-1 - Update to 140.9.0 ESR Tenable has extracted the preceding description block directly from the Oracle Linu...

thunderbird security update

140.9.0-1.0.1 - Add Oracle prefs 140.9.0-1 - Update to 140.9.0 ESR...

The vulnerability of the release_module_tags() function in the lib/alloc_tag.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the releasemoduletags function in the lib/alloctag.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the dasd_eckd_free_cp() function in the drivers/s390/block/dasd_eckd.c file of the Linux operating system’s S390 platform support driver for block devices allows a hacker to cause a service failure.

The vulnerability of the dasdeckdfreecp function in the drivers/s390/block/dasdeckd.c file of the Linux S390 kernel-based block device support driver involves improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause service failure...

The vulnerability of the ubifs_release_folio() function in the fs/ubifs/file.c module of the Linux kernel file system allows a attacker to cause a service failure.

The vulnerability of the ubifsreleasefolio function in the fs/ubifs/file.c module of the Linux kernel’s file system is related to copying buffers without checking their size a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-36394

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free issue exists in the USB ULPI Ultra Low Power Interface component. When the device register function fails, ulpi register invokes put device on ulpi-dev. The device release...

The vulnerability of the mhi_init_mmio() function in the drivers/bus/mhi/host/init.c file of the MHI bus driver for Linux kernel exposes the confidentiality, integrity, and accessibility of protected information to be compromised by attackers.

The vulnerability of the mhiinitmmio function in the drivers/bus/mhi/host/init.c file of the MHI bus driver for Linux operating systems is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the gs_usb_receive_bulk_callback() function in the drivers/net/can/usb/gs_usb.c module of the Linux network device driver framework allows a attacker to cause a service failure.

The vulnerability of the gsusbreceivebulkcallback function in the drivers/net/can/usb/gsusb.c file of the Linux network device driver module is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause a service failure...