Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses golang.org/x/sys-v0.38.0 which is vulnerable to CVE-2026-39824.

Summary IBM Maximo Application Suite - Visual Inspection component uses golang.org/x/sys-v0.38.0 which is vulnerable to CVE-2026-39824. This bulletin contains information regarding the vulnerability and its remediation Vulnerability Details CVEID:CVE-2026-39824 DESCRIPTION: NewNTUnicodeString doe...

Security update for keybase-client (low)

openSUSE Security Update: Security update for keybase-client Announcement ID: openSUSE-SU-2026:0272-1 Rating: low References: Cross-References: CVE-2026-39824 Affected Products: openSUSE Backports SLE-15-SP7 An update that fixes one vulnerability is now available. Description: This update for...

SUSE CVE-2026-39824

NewNTUnicodeString does not check for string length overflow. When provided with a string that overflows the maximum size of a NTUnicodeString a 16-bit number of bytes, it returns a truncated string rather than an error...

CLEANSTART-2026-ZO95473 Security fixes in libnvidia-container 1.19.0-r0

Package libnvidia-container version 1.19.0-r0 fixes 1 vulnerabilities: CVE-2026-39824...

CLEANSTART-2026-BC71667 Security fixes in fluent-operator-fips 3.8.0-r0

Package fluent-operator-fips version 3.8.0-r0 fixes 1 vulnerabilities: CVE-2026-39824...

CLEANSTART-2026-II73843 Security fixes in nvidia-container-toolkit 1.18.2-r0

Package nvidia-container-toolkit version 1.18.2-r0 fixes 1 vulnerabilities: CVE-2026-39824...

CLEANSTART-2026-TQ91108 Security fixes in gosu 1.19-r2

Package gosu version 1.19-r2 fixes 1 vulnerabilities: CVE-2026-39824...

CLEANSTART-2026-ZR84349 Security fixes in configmap-reload 0.15.0-r1

Package configmap-reload version 0.15.0-r1 fixes 1 vulnerabilities: CVE-2026-39824...

CLEANSTART-2026-YB06143 Security fixes in access-log-exporter 0.1.15-r0

Package access-log-exporter version 0.1.15-r0 fixes 1 vulnerabilities: CVE-2026-39824...

OPENSUSE-SU-2026:21471-1 Security update for keybase-client

This update for keybase-client fixes the following issues: Changes in keybase-client: - CVE-2026-39824: failure to reject ASCII-only Punycode-encoded labels...

CLEANSTART-2026-TE81995 Security fixes for CVE-2024-51744, CVE-2025-30204, CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729, CVE-2026-27139, CVE-2026-32282, CVE-2026-32288, CVE-2026-32289, CVE-2026-33186, CVE-2026-39817, CVE-2026-39819, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-42502, CVE-2026-42506, ghsa-p77j-4mvh-x3m3 applied in versions: 0.6.3-r1, 0.7.1-r0, 0.7.1-r1, 0.7.1-r2

Multiple security vulnerabilities affect the velero-plugin-for-csi package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AQ98798 Security fixes for CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, CVE-2026-46680, CVE-2026-47262, CVE-2026-48978, CVE-2026-50151, CVE-2026-50162, CVE-2026-53488, ghsa-fqw6-gf59-qr4w, ghsa-jpcc-p29g-p8mq, ghsa-vh4v-2xq2-g5cg, ghsa-xhf5-7wjv-pqxp applied in versions: 1.42.0-r0, 1.42.1-r0, 1.42.1-r1

Multiple security vulnerabilities affect the tigera-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

kbfs-6.6.3-3.1 on GA media (moderate)

kbfs-6.6.3-3.1 on GA media Announcement ID: openSUSE-SU-2026:11306-1 Rating: moderate Cross-References: CVE-2026-39824 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the kbfs-6.6.3-3.1 packag...

CLEANSTART-2026-XQ43390 Security fixes for CVE-2026-27145, CVE-2026-39824, CVE-2026-42504, CVE-2026-42507 applied in versions: 1.19.0-r0, 1.19.0-r1

Multiple security vulnerabilities affect the libnvidia-container package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AV21509 Security fixes for CVE-2026-27145, CVE-2026-33816, CVE-2026-34986, CVE-2026-39821, CVE-2026-39824, CVE-2026-39883, CVE-2026-41602, CVE-2026-42504, CVE-2026-42507, CVE-2026-46595, ghsa-6g7g-w4f8-9c9x, ghsa-p77j-4mvh-x3m3, ghsa-xmrv-pmrh-hhx2 applied in versions: 0.144.0-r3, 0.144.0-r4, 0.150.0-r0, 0.150.0-r1

Multiple security vulnerabilities affect the opentelemetry-collector-contrib package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MR40964 Security fixes for CVE-2025-47907, CVE-2025-61726, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2026-39824 applied in versions: 1.17-r5, 1.19-r0, 1.19-r1, 1.19-r2

Multiple security vulnerabilities affect the gosu package. These issues are resolved in later releases. See references for individual vulnerability details...

Security Bulletin: Multiple vulnerabilities in IBM Aspera HTTP Gateway

Summary Multiple vulnerabilities were addressed in IBM Aspera HTTP Gateway version 2.3.3 Vulnerability Details CVEID:CVE-2026-33814 DESCRIPTION: When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGSMAXFRAMESIZE with ...

CLEANSTART-2026-BP69037 Security fixes for CVE-2026-27145, CVE-2026-39824, CVE-2026-42504, CVE-2026-42507 applied in versions: 1.0.10-r4, 1.0.10-r5

Multiple security vulnerabilities affect the wait-for-port package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-39824

NewNTUnicodeString does not check for string length overflow. When provided with a string that overflows the maximum size of a NTUnicodeString a 16-bit number of bytes, it returns a truncated string rather than an error...

Linux Distros Unpatched Vulnerability : CVE-2026-39824

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NewNTUnicodeString does not check for string length overflow. When provided with a string that overflows the maximum size of a NTUnicodeString a 16-bit number o...