[SECURITY] Fedora 43 Update: vim-9.2.240-1.fc43

VIM VIsual editor iMproved is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more...

PT-2026-28280

Wazuh version 4.12.0 contains an exposure vulnerability in GitHub Actions workflow artifacts that allows attackers to extract the GITHUB TOKEN from uploaded artifacts. Attackers can use the exposed token within a limited time window to perform unauthorized actions such as pushing malicious commit...

mpc52xx_lpbfifo_probe Heap Buffer Overflow DoS

The vulnerability of the mpc52xxlpbfifoprobe function in the arch/powerpc/platforms/52xx/mpc52xxlpbfifo.c module of the PowerPC platform’s Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

samsung_tty Heap Buffer Overflow DoS

The vulnerability of the s3c24xxserialgetclk function in the drivers/tty/serial/samsungtty.c module of the console TTY driver in the Linux kernel’s serial port is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker...

Linux multimedia driver Heap Buffer Overflow DoS

The vulnerability of the hi846parsedt function in the drivers/media/i2c/hi846.c module of the Linux operating system’s multimedia device driver relates to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux SOC Kernel Driver Heap Buffer Overflow DoS

The vulnerability of the aspeedsocinfoinit function in the drivers/soc/aspeed/aspeed-socinfo.c module of the Linux SOC kernel driver is related to improper memory release. Exploiting this vulnerability can allow an attacker to cause a system failure...

Medium: libssh

Issue Overview: libssh: SCP Protocol Path Traversal in sshscppullrequest CVE-2026-0964 libssh: Specially crafted patterns could cause DoS CVE-2026-0967 Affected Packages: libssh Issue Correction: Run dnf update libssh --releasever 2023.10.20260325 or dnf update --advisory ALAS2023-2026-1472...

Linux kernel Network Adapter Driver Heap Buffer Overflow DoS

The vulnerability of the updateeth regs async function in the drivers/net/usb/pegasus.c file of the Linux network adapter driver module is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

PT-2026-28670

Name of the Vulnerable Software and Affected Versions Page-Replica Page Replica versions prior to e4a7f52e75093ee318b4d5a9a9db6751050d2ad0 Description A server-side request forgery SSRF issue exists in the sitemap.fetch function within the /sitemap file of the Endpoint component. Manipulation of...

Linux ARM64 BPF JIT DoS

The vulnerability of the preparetrampoline function in the arch/arm64/net/bpfjitcomp.c network support module on the ARM 64-bit kernel of the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause a service...

Linux kernel firmware driver Heap Buffer Overflow DoS

The vulnerability of the rpifirmwareprobe function in the drivers/firmware/raspberrypi.c file of the Linux kernel’s firmware driver module is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

Medium: gvfs

Issue Overview: A flaw was found in the FTP GVfs backend. A malicious FTP server can exploit this vulnerability by providing an arbitrary IP address and port in its passive mode PASV response. The client unconditionally trusts this information and attempts to connect to the specified endpoint,...

LoongArch architecture support module Kernel Heap Buffer Overflow DoS

The vulnerability of the kvmpchpicdestroy function in the arch/loongarch/kvm/intc/pchpic.c module of the LoongArch architecture support for the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

NTFS Heap Buffer Overflow DoS

The vulnerability of the ntfsfillsuper function in the fs/ntfs3/super.c file of the NTFS file system in the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux net/ipv6/ip6_output Heap Buffer Overflow DoS

The vulnerability of the ip6forward function in the net/ipv6/ip6output.c module of the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

firefox security update

140.9.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 140.9.0-1 - Update to 140.9.0 ESR...

Oracle Linux 9 : firefox (ELSA-2026-5930)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-5930 advisory. 140.9.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red...

CVE-2026-30976

Sonarr is a PVR for Usenet and BitTorrent users. In versions on the 4.x branch prior to 4.0.17.2950, an unauthenticated remote attacker can potentially read any file readable by the Sonarr process. These include application configuration files containing API keys and database credentials, Windows...

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q8-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Missing Release of Memory after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime in the META reader during processing of the APP1JPEG input path. An attacker can cause increased memory consumption by submitting specially crafted image files. Remediation A fix was...