1 hour 2 minutes ago
It was discovered that some Arm processors could complete a broadcast
translation lookaside buffer (TLB) invalidation before memory writes made
through the invalidated translation were globally observed. A local
attacker could possibly use this to write to memory after permission to do
so had been revoked, bypassing memory protections or escalating privileges.
(CVE-2025-10263)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- ARM64 architecture;
- InfiniBand drivers;
- Network drivers;
- TCM subsystem;
- exFAT file system;
- Network file system (NFS) client;
- Network file system (NFS) server daemon;
- B.A.T.M.A.N. meshing protocol;
- IPv4 networking;
- IPv6 networking;
- Netfilter;
- RDS protocol;
(CVE-2026-53131, CVE-2026-53186, CVE-2026-53216, CVE-2026-53221,
CVE-2026-53354, CVE-2026-53355, CVE-2026-53398, CVE-2026-63800,
CVE-2026-63808, CVE-2026-63887, CVE-2026-63888, CVE-2026-63912,
CVE-2026-63922, CVE-2026-63924, CVE-2026-63984, CVE-2026-63992,
CVE-2026-63993, CVE-2026-63994, CVE-2026-64007, CVE-2026-64091)
2 hours 35 minutes ago
It was discovered that LibreOffice incorrectly handled WMF image
imports. An attacker could possibly use this issue to cause LibreOffice
to crash, resulting in a denial of service, or execute arbitrary code.
(CVE-2026-63272)
It was discovered that LibreOffice incorrectly handled PDF document
imports. An attacker could possibly use this issue to cause LibreOffice
to crash, resulting in a denial of service, or execute arbitrary code.
(CVE-2026-63273, CVE-2026-63274)
It was discovered that LibreOffice incorrectly handled CFF fonts
embedded in documents. An attacker could possibly use this issue to
cause LibreOffice to crash, resulting in a denial of service, or
execute arbitrary code. (CVE-2026-63275, CVE-2026-63276)
It was discovered that LibreOffice incorrectly validated package URLs.
An attacker could possibly use this issue to obtain sensitive
information. (CVE-2026-63278)
It was discovered that LibreOffice incorrectly handled PICT image
imports. An attacker could possibly use this issue to cause LibreOffice
to crash, resulting in a denial of service, or obtain sensitive
information. (CVE-2026-63279)
It was discovered that LibreOffice incorrectly mitigated out-of-bounds
writes via Graphite font actions. An attacker could possibly use this
issue to cause LibreOffice to crash, resulting in a denial of service,
or execute arbitrary code. (CVE-2026-50593)
