Important: Red Hat Security Advisory: git-lfs security update

An update for git-lfs is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Security update for the Linux Kernel (Live Patch 39 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.163 fixes various security issues The following security issues were fixed: CVE-2026-23393: bridge: cfm: Fix race condition in peermep deletion bsc1260524. CVE-2026-31505: iavf: fix out-of-bounds writes in iavfgetethtoolstats...

kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change

In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: Always remove class from active list before deleting in etsqdiscchange [email protected] says: The vulnerability is a race condition between etsqdiscdequeue and etsqdiscchange. It leads to UAF on stru...

PT-2026-58715

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to perform local tampering. This occurs when the system does not properly validate symbol...

CVE-2026-50527: Stack-based Buffer Overflow

Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network...

CVE-2026-50648: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network...

CVE-2026-50646: Protection Mechanism Failure

Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally...

CVE-2026-50659: Improper Encoding or Escaping of Output

Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network...

CVE-2026-50526: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to perform tampering locally...

CVE-2026-50525: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...

CVE-2026-47304: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-47302: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...

CVE-2026-57108: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in .NET Core allows an unauthorized attacker to deny service over a network...

PT-2026-59003

Unauthenticated Use of Server-Side NetLicensing API Key in HTTP Mode Summary When netlicensing-mcp is run in HTTP transport mode, the ApiKeyMiddleware fails to enforce authentication: requests that carry no client API key are unconditionally forwarded to the next handler server.py:1427. The...

CVE-2026-50524: Improper Validation of Specified Type of Input

Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network...

CVE-2026-50651: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...

PT-2026-58804

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description Incorrect authorization allows an unauthorized attacker to bypass a security feature over a network without requiring a login or user interaction. Recommendations At the moment, there is no...

PT-2026-58714

Name of the Vulnerable Software and Affected Versions .NET versions 8 through 10 .NET Framework affected versions not specified Description An issue exists where resources are allocated without limits or throttling, allowing an unauthenticated attacker to drain system resources over a network and...

PT-2026-58713

Name of the Vulnerable Software and Affected Versions .NET Framework affected versions not specified Description Improper validation of a specified input type allows an unauthorized attacker to cause a denial of service over a network. Recommendations At the moment, there is no information about ...

PT-2026-58805

Name of the Vulnerable Software and Affected Versions .NET Framework affected versions not specified Description A protection mechanism failure allows an unauthorized attacker to execute arbitrary code locally or remotely, potentially compromising the system. Recommendations At the moment, there ...