ROS-20260908-73-0059

The vulnerability in nvidia-kmod is related to improper storage of resolutions. Exploiting this vulnerability can allow an attacker to increase their privileges...

DNS Rebinding

9Router is vulnerable to DNS Rebinding. The vulnerability is due to inconsistent DNS validation during image fetching, where the image URL is validated and fetched using separate DNS resolutions, allowing attackers to exploit DNS rebinding to access internal HTTP services...

Vulnerability of hardware and software solutions for data storage and information processing in Dell PowerFlex Manager, PowerFlex Appliance, and PowerFlex Rack systems, due to the improper use of standard resolutions. This vulnerability allows attackers to compromise protected information.

The vulnerability of hardware and software solutions for data storage and information processing in Dell PowerFlex Manager, PowerFlex Appliance, and PowerFlex Rack is related to the improper use of standard permissions. Exploiting this vulnerability can allow attackers to disclose protected...

.NET 10.0 security update

10.0.109-1.0.1 - Add support for Oracle Linux 10.0.109-1 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181555 10.0.106-2 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163381 10.0.104-2 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152949...

Oracle Linux 8 : .NET / 9.0 (ELSA-2026-25113)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-25113 advisory. 9.0.118-1.0.1 - Add support for Oracle Linux 9.0.118-1 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181550 9.0.116-2 - Update to...

openssl security update

3.5.1-7.0.1 - Enable openssl-fips-provider dependency Orabug: 36504822 - Temporary disable openssl-fips-provider dependency Orabug: 36504822 - Replace upstream references Orabug: 34340177 3.5.1.openela.0.1 - Add OpenELA specific changes 1:3.5.1-7 - Fix CVE-2025-11187 CVE-2025-15467 CVE-2025-15468...

A 90-Day Action Plan to Turn Resolutions into Results with Wiz

Whether you’re new to Wiz or early in your cloud security journey, start the year strong by turning cloud security resolutions into real impact in your first 90 days with Wiz...

Resolutions, shmesolutions (and what’s actually worked for me)

Welcome to this week's edition of the Threat Source newsletter. I went to bed at 8:30 p.m. on New Year's Eve, and I think that's pretty indicative of how I approach the whole idea of New Year's resolutions. I love to count down to the new year with loved ones as much as the next person, but I hav...

The vulnerability of CODESYS software products, related to the improper use of standard resolutions, allows a perpetrator to gain access to confidential information.

The vulnerability of CODESYS software products is related to the incorrect use of standard resolutions. Exploiting this vulnerability can allow an attacker to access confidential information...

The vulnerability of the LaTeX text editor EMACS’ implementation allows a hacker to trigger a service failure.

The vulnerability of the LaTeX text editor EMACS’ implementation is related to incorrect standard resolutions. Exploiting this vulnerability can allow an attacker to cause a service failure...

buildah security update

1.41.6-1.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117178 2:1.41.6-1 - update to the latest content of https://github.com/containers/buildah/tree/release-1.41 https://github.com/containers/buildah/commit/2ece502 - fixes 'Minor Incident CVE-2025-52881 buildah:...

The vulnerability of the WebGPU component in the Mozilla Firefox browser allows a hacker to execute arbitrary code.

The vulnerability of the WebGPU component in the Mozilla Firefox browser is related to the improper use of standard resolutions. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

java-1.8.0-openjdk security update

1.8.0.472.b08-1.0.1 - Update to 8u472-b08 GA Orabug: 38571645 - Update release notes for 8u472-b08. - Drop local JDK-8339414 fix as this is now included upstream - Reset rpmrelease to 1 now there are no other RPM builds on RHEL 8 - Sync the copy of the portable specfile with the latest update -...

Use-After-Free

github.com/envoyproxy/envoy is vulnerable to a Use-After-Free. The vulnerability is due to improper handling of DNS cache operations in the Dynamic Forward Proxy implementation, where a completion callback can trigger new or remove existing DNS resolutions, which allows an attacker to cause...

EUVD-2019-3256

Malware in sbrugna...

The vulnerability of the GNU screen terminal multiplexer, related to the improper use of standard resolutions, allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the GNU screen terminal multiplexer is related to the incorrect use of standard resolutions. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

The vulnerability of the optimizing compiler oneAPI DPC++/C++ Compiler, related to the incorrect use of standard resolutions, allows attackers to increase their privileges.

The vulnerability of the optimizing compiler oneAPI DPC++/C++ Compiler is related to the incorrect use of standard resolutions. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Intel Graphics Driver drivers lies in the improper use of standard resolutions, which allows attackers to increase their privileges.

The vulnerability of Intel Graphics Driver drivers is related to the incorrect use of standard resolutions. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the tools and libraries used for working with Intel RealSense SDK cameras involves incorrect use of standard resolutions, allowing attackers to exploit this to increase their privileges.

The vulnerability of the tools and libraries for working with Intel RealSense SDK 3D cameras is related to the improper use of standard resolutions. Exploiting this vulnerability can allow attackers to enhance their privileges...

kernel security update

4.18.0-553.66.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...