Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.52 bug fix and security update

Red Hat OpenShift Container Platform release 4.17.52 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a...

[SECURITY] Fedora 43 Update: gstreamer1-rtsp-server-1.26.11-1.fc43

A GStreamer-based RTSP server library...

[SECURITY] Fedora 43 Update: python-gstreamer1-1.26.11-1.fc43

This module contains PyGObject overrides to make it easier to write applications that use GStreamer 1.x in Python...

[SECURITY] Fedora 43 Update: gstreamer1-plugins-base-1.26.11-1.fc43

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

[SECURITY] Fedora 43 Update: gstreamer1-1.26.11-1.fc43

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

[SECURITY] Fedora 43 Update: gstreamer1-doc-1.26.11-1.fc43

GStreamer documentation...

[SECURITY] Fedora 43 Update: rust-1.94.1-1.fc43

Rust is a systems programming language that runs blazingly fast, prevents segfaults, and guarantees thread safety. This package includes the Rust compiler and documentation generator...

[SECURITY] Fedora 43 Update: insight-18.0.50.20260306-2.fc43

Insight is a tight graphical user interface to GDB written in Tcl/Tk. It provides a comprehensive interface that enables users to harness most of GDB's power. It's also probably the only up-to-date UI for the latest GDB version...

CVE-2026-35057 XenForo Stored Cross-Site Scripting via Structured Text Mentions

XenForo before 2.3.10 and before 2.2.19 is vulnerable to stored cross-site scripting XSS in structured text mentions, primarily affecting legacy profile post content. An attacker can inject malicious scripts through crafted mentions that are stored and executed when other users view the content...

OpenViking 安全漏洞

OpenViking is an open-source artificial intelligence proxy context database developed by Volcengine. Versions of OpenViking prior to 0.2.14 contained security vulnerabilities. These vulnerabilities stemmed from a lack of authentication in the bot proxy router, allowing unauthorized attackers to...

thunderbird security update

140.9.0-1.0.1 - Add Oracle prefs 140.9.0-1 - Update to 140.9.0 ESR...

PT-2026-44252

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free issue exists in the btrfs module within the create space info function error path. When kobject init and add fails, the system executes a call chain that leads to space inf...

The vulnerability of the mhi_init_mmio() function in the drivers/bus/mhi/host/init.c file of the MHI bus driver for Linux kernel exposes the confidentiality, integrity, and accessibility of protected information to be compromised by attackers.

The vulnerability of the mhiinitmmio function in the drivers/bus/mhi/host/init.c file of the MHI bus driver for Linux operating systems is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the mt7921_check_offload_capability() function in the drivers/net/wireless/mediatek/mt76/mt7921/init.c file of the Mediatek wireless communication adapter driver for the Linux operating system, which allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the mt7921checkoffloadcapability function in the drivers/net/wireless/mediatek/mt76/mt7921/init.c file of the Mediatek wireless adapter driver for the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this...

The vulnerability of the dasd_eckd_free_cp() function in the drivers/s390/block/dasd_eckd.c file of the Linux operating system’s S390 platform support driver for block devices allows a hacker to cause a service failure.

The vulnerability of the dasdeckdfreecp function in the drivers/s390/block/dasdeckd.c file of the Linux S390 kernel-based block device support driver involves improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause service failure...

Oracle Linux 10 : thunderbird (ELSA-2026-6342)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-6342 advisory. 140.9.0-1.0.1 - Add Oracle prefs 140.9.0-1 - Update to 140.9.0 ESR Tenable has extracted the preceding description block directly from the Oracle Linu...

python311-nltk-3.9.4-1.1 on GA media (moderate)

python311-nltk-3.9.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:10461-1 Rating: moderate Cross-References: CVE-2026-33230 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

PT-2026-36394

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free issue exists in the USB ULPI Ultra Low Power Interface component. When the device register function fails, ulpi register invokes put device on ulpi-dev. The device release...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from a race condition between data release and access to the file system data. This vulnerability may...

The vulnerabilities of the functions mdio_busPhy_suspend() and mdio_bus Phy_resume() in the module drivers/net/phy/phy_device.c of the Linux operating system’s physical-layer PHY driver allow a attacker to cause a service failure.

The vulnerability of the functions mdiobusPhysuspend and mdiobus Phyresume in the drivers/net/phy/phydevice.c file of the Linux physical-layer network driver is related to improper termination or release of resources. Exploiting this vulnerability could allow a remote attacker to cause service...