Imagination Graphics DDK 安全漏洞

Imagination Graphics DDK is a suite of GPU driver tools from Imagination UK. A security vulnerability exists in the Imagination Graphics DDK that stems from the possibility that an unprivileged user may make improper GPU system calls, leading to improper management of resource reference counts an...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from accessing oaconfig-id after releasing a lock in the xeoaaddconfigioctl function, which could lead to...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from allowing the KVMMEMGUESTMEMFD flag to be cleared on an existing memory slot, potentially leading to reuse...

Imagination Graphics DDK 安全漏洞

Imagination Graphics DDK is a suite of GPU driver tools from Imagination UK. A security vulnerability exists in the Imagination Graphics DDK that stems from the possibility that an unprivileged user may make improper GPU system calls, resulting in improper management of reference counts, which ma...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from repeated deregistration of the HCAPORTS component in the mlx5 driver, which could lead to reuse after releas...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a post-release reuse issue with the delayed work item otgevent in the fslotgremove function, which could lea...

PT-2026-2642

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 147 Firefox ESR versions prior to 115.32 Firefox ESR versions prior to 140.7 Description A flaw exists due to an integer overflow within the Graphics component, potentially allowing for a sandbox escape. Recommendatio...

Mozilla Firefox和Mozilla Firefox ESR 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation.Mozilla Firefox ESR is an extended support version of Firefox web browser from the Mozilla Foundation.Mozilla Thunderbird is a suite of e-mail client software from the Mozilla Foundation that is separate from the Mozilla...

Mozilla Firefox和Mozilla Firefox ESR 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation.Mozilla Firefox ESR is an extended support version of Firefox web browser from the Mozilla Foundation.Mozilla Thunderbird is a suite of e-mail client software from the Mozilla Foundation that is separate from the Mozilla...

PT-2026-2649

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 147 Firefox ESR versions prior to 140.7 Description A clickjacking issue exists, leading to information disclosure within the PDF Viewer component. The issue allows unauthorized access to sensitive information...

ROS-20260113-7370

A vulnerability in the nfsendreset6 function of the net/ipv6/netfilter/nfrejectipv6.c component of the Linux operating system kernel is related to resource release errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

CVE-2025-38556 affecting package kernel for versions less than 6.6.119.3-1

CVE-2025-38556 affecting package kernel for versions less than 6.6.119.3-1. A patched version of the package is available...

CVE-2021-20225 affecting package grub2 for versions less than 2.06-26

CVE-2021-20225 affecting package grub2 for versions less than 2.06-26. A patched version of the package is available...

CVE-2025-13836 affecting package python3 for versions less than 3.12.9-7

CVE-2025-13836 affecting package python3 for versions less than 3.12.9-7. A patched version of the package is available...

CVE-2025-38627 affecting package kernel for versions less than 6.6.119.3-1

CVE-2025-38627 affecting package kernel for versions less than 6.6.119.3-1. A patched version of the package is available...

CVE-2025-14512 affecting package glib for versions less than 2.78.6-6

CVE-2025-14512 affecting package glib for versions less than 2.78.6-6. A patched version of the package is available...

CVE-2026-22251

wlc is a Weblate command-line client using Weblate's REST API. Prior to 1.17.0, wlc supported providing unscoped API keys in the setting. This practice was discouraged for years, but the code was never removed. This might cause the API key to be leaked to different servers...

CVE-2025-68472 MindsDB has improper sanitation of filepath that leads to information disclosure and DOS

MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 25.11.1, an unauthenticated path traversal in the file upload API lets any caller read arbitrary files from the server filesystem and move them into MindsDB’s storage, exposing sensitive data. The PU...

libpq security update

13.23-1 - Rebase to upstream release 13.23 - Resolves: RHEL-131279 CVE-2025-12818...

kernel security update

4.18.0-553.92.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...