PT-2026-22621

Chamilo is a learning management system. Prior to version 1.11.30, the open parameter of help.php fails to properly sanitize user input. This allows an attacker to inject arbitrary HTML, such as underlined text, via a crafted URL. This issue has been patched in version 1.11.30...

thunderbird security update

140.8.0-1.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 140.8.0 - Add OpenELA debranding 140.8.0-1 - Update to 140.8.0 ESR...

Important Photon OS Security Update - PHSA-2026-5.0-92-0779

Updates of 'linux', 'linux-esx' packages of Photon OS have been released...

PT-2026-26016

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.2.24 Description OpenClaw versions before 2026.2.24 contain a local media root bypass in the sendAttachment and setGroupIcon message actions when sandboxRoot is not configured. This allows attackers to read...

PT-2026-30035

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the drm/xe/configfs subsystem. Specifically, memory allocated for ctx restore mid bb is not fully freed during device removal, leading to a memory...

Oracle Linux 9 : firefox (ELSA-2026-3339)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-3339 advisory. 140.8.0-2.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red...

Fedora: Security Advisory (FEDORA-2026-9a4d6dd8eb)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2026:0670-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux RPC svc_defer Heap Buffer Overflow DoS

The vulnerability of the svcdefer function in the net/sunrpc/svcxprt.c module of the Linux operating system’s RPC protocol implementation is related to the repeated release of previously released memory. Exploiting this vulnerability could allow a remote attacker to cause service failures...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the skstreamkillqueues function in the net/core/stream.c module of the Linux kernel’s networking functions is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

AMD DRI Graphics Heap Buffer Overflow DoS

The vulnerability of the svmrangerestorepages function in the driver/gpu/drm/amd/amdkfd/kfdsvm.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to the improper disabling or release of resources. Exploiting this vulnerability may...

Linux kernel trace_pid_write buffer overflow DoS

The vulnerability of the tracepidwrite function in the kernel/trace/trace.c module, which supports Linux operating system tracing, is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

Linux kernel VM_MERGEABLE macro definition Data Compromise

The vulnerability of the VMMERGEABLE macro definition in the include/linux/mm.h module of the Linux operating system’s kernel is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux RPC GSS DoS

The vulnerability of the gssreadproxyverf function in the net/sunrpc/authgss/svcauthgss.c module of the RPC protocol implementation in the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service failures...

exFAT File System Heap Buffer Overflow DoS

The vulnerability of the exfatfind function in the fs/exfat/namei.c file of the exFAT file system in Linux’s kernel is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...

Linux TCP Disconnect Use-After-Free

The vulnerability of the tcpdisconnect function in the net/ipv4/tcp.c module of the Linux kernel’s IPv4 protocol implementation is related to improper release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Linux kernel FSL LPUART DMA Shutdown

The vulnerability of the lpuartdmashutdown function in the drivers/tty/serial/fsllpuart.c module of the console TTY driver in the Linux kernel’s serial port layer is related to improper termination or release of resources. Exploiting this vulnerability could allow an attacker to compromise the...

Linux net/sched cls_tcindex tcindex_set_parms Buffer Overflow

The vulnerability of the tcindexsetparms function in the net/sched/clstcindex.c module of the network scheduling subsystem in the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005556)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005556 advisory. In the Linux kernel, the following vulnerability has been resolved: kcm: Serialise kcmsendmsg for the same socket. syzkaller reported UAF in kcmrelease. 0 The scenar...

[SECURITY] Fedora 42 Update: python-django4.2-4.2.28-1.fc42

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...