ALSA-2026:76733 Important: rust-rpm-sequoia security update

An implementation of the RPM PGP interface using Sequoia. Security Fixes: sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion CVE-2026-42784 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...

CVE-2026-101157: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability may allow an unauthenticated attacker with adjacent-network access to inject malicious content that executes when an authenticated user views affected content. Successful exploitation may allow the attacker to compromise the victim's authenticated...

CVE-2026-39747: Improper Neutralization of Special Elements used in an SQL Command

Subscriber SQL Injection in Woffice = 5.4.35 versions...

CVE-2026-73278: Improper Authentication

Gitea's OAuth2 and OpenID Connect sign-in paths do not require a WebAuthn challenge when WebAuthn is the account's only configured second factor. A party able to authenticate through the affected external identity flow can obtain a full session without the passkey verification enforced during...

ALSA-2026:76734 Important: rust-rpm-sequoia security, bug fix, and enhancement update

An implementation of the RPM PGP interface using Sequoia. Security Fixes: sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion CVE-2026-42784 Bug Fixes and Enhancements: Uninformative error message on --import failure almalinux-10.2.z JIRA:AlmaLinux-176906...

ALSA-2026:76737 Important: rust-sequoia-sq security, bug fix, and enhancement update

Command-line frontends for Sequoia. Security Fixes: sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion CVE-2026-42784 Bug Fixes and Enhancements: Unbundle capnproto from sequoia-sq almalinux-10.2.z JIRA:AlmaLinux-177547 For more details about the security...

Linux kernel TCP Connection Request Buffer Overflow DoS

The vulnerability of the tcpconnrequest function in the include/net/tcp.h component of the Linux kernel is related to the predictability of random initial numbers for TCP sessions. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

Linux fs/mnt_idmapping.c Heap Buffer Overflow DoS

The vulnerability of the statmountmntidmap function in the fs/mntidmapping.c component of the Linux operating system is related to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

RHEL 10 : rust-rpm-sequoia (RHSA-2026:76734)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:76734 advisory. An implementation of the RPM PGP interface using Sequoia. Security Fixes: sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via...

ALSA-2026:76735 Important: rust-sequoia-sqv security update

A simple OpenPGP signature verification program. Security Fixes: sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion CVE-2026-42784 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related informatio...

Arbitrary file manipulation vulnerability exists in the Brocade Fabric OS WebTools management

: An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When processing configuration transfer requests, the application fails to properly validate and sanitize a user-supplied status file...

RHEL 10 : rust-sequoia-sqv (RHSA-2026:76735)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:76735 advisory. A simple OpenPGP signature verification program. Security Fixes: sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag...

ROS-20261006-73-0325

The vulnerability of the tegraqspicombinedseqxfer function in the drivers/spi/spi-tegra210-quad.c file of the Linux operating system’s SPI device driver relates to the pointer assignment. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Important: rust-rpm-sequoia security update

An implementation of the RPM PGP interface using Sequoia. Security Fixes: sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion CVE-2026-42784 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...

ROS-20261006-73-0018

The vulnerability of the squashfsreadmetadata function in the fs/squashfs/cache.c file of the Squashfs file system in the Linux kernel is related to an improper check of the specified index, position, or offset in the input data. Exploiting this vulnerability could allow an attacker to compromise...

ROS-20261006-73-0048

The vulnerability of the Linux operating system’s kernel security module, AppArmor, is related to coding errors. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...

RHEL 9 : rust-rpm-sequoia (RHSA-2026:76733)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:76733 advisory. An implementation of the RPM PGP interface using Sequoia. Security Fixes: sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via k...

PT-2026-107139

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A stored cross-site scripting XSS issue allows an unauthenticated attacker with adjacent-network access to inject malicious content. This content executes when ...

ROS-20261006-73-0078

The vulnerability of the pmruntimereinit function in the drivers/base/power/runtime.c file of the Linux kernel’s device drivers module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

CVE-2026-105679

Ghost is a Node.js content management system. From 6.22.1 until 6.64.0, Ghost restricted the content type used to serve uploaded files to prevent browsers from executing them. On sites using the default local storage adapter, this restriction was not applied, so files uploaded by any staff user...