CLSA-2026-1792688613 rpm: Fix of 3 CVEs

CVE-2026-95519: do not macro expand manifest entries and package paths in rpmgi before opening them - CVE-2026-95521: do not macro expand source package file basenames when installing or rebuilding a source RPM - CVE-2026-78367: do not macro expand the spec file name when parsing a spec, such as...

EUVD-2026-105303

virtualenv: Generated files can follow existing destination links...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in LangChain (CVE-2026-55443)

Summary IBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in LangChain, due to several LangChain components that resolve filesystem paths or expand search patterns that do not consistently confine the resolved path to the intended root directory. LangChain is used in our Spee...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an Unrestricted Upload of File with Dangerous Type in pip (CVE-2026-3219)

Summary IBM Watson Speech Services Cartridge is vulnerable to an Unrestricted Upload of File with Dangerous Type in pip. Pip is used in our Speech Service Runtimes. This vulnerability has been addressed. Please read the details for remediation below. Vulnerability Details CVEID:CVE-2026-3219...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in pip (CVE-2026-1703)

Summary IBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in pip due to a flaw that allows files to be extracted outside the installation directory when pip is installing and extracting a maliciously crafted wheel archive. Pip is used in our Speech Service Runtimes. This...

SUSE CVE-2026-85518

A flaw was found in OpenSCAP. When decomposing a Source DataStream SDS file, the application does not properly validate relative file path attributes, leading to a path traversal vulnerability. An attacker can exploit this flaw by tricking a user or automated system into decomposing a crafted...

SUSE CVE-2026-98682

In the Linux kernel, the following vulnerability has been resolved: smb: client: drain and invalidate before server-side copy/clone cifsfilecopychunkrange and the clone FICLONE path of cifsremapfilerange do not serialise the destination page cache against the server-side copy the way the other...

SUSE CVE-2026-98686

In the Linux kernel, the following vulnerability has been resolved: smb: client: discard post-EOF pagecache when extending a file via zero range smb3zerorange removed the pagecache only for the range being zeroed, so when it extends the file the folio straddling the old EOF - which may hold data...

CVE-2026-114606 draw.io Desktop: Arbitrary local-file read via read-side IPC (no blessed-path gate)

draw.io Desktop is the official Electron build of draw.io. Prior to 31.4.4, draw.io Desktop is vulnerable to arbitrary local-file disclosure through the Electron main process's read-side IPC handlers. The readFile, getFileDrafts, getBkpFile, fileStat, isFileWritable, checkFileExists, and watchFil...

CVE-2026-114606 draw.io Desktop: Arbitrary local-file read via read-side IPC (no blessed-path gate)

draw.io Desktop is the official Electron build of draw.io. Prior to 31.4.4, draw.io Desktop is vulnerable to arbitrary local-file disclosure through the Electron main process's read-side IPC handlers. The readFile, getFileDrafts, getBkpFile, fileStat, isFileWritable, checkFileExists, and watchFil...

EUVD-2026-108231

draw.io Desktop is the official Electron build of draw.io. Prior to 31.4.4, draw.io Desktop is vulnerable to arbitrary local-file disclosure through the Electron main process's read-side IPC handlers. The readFile, getFileDrafts, getBkpFile, fileStat, isFileWritable, checkFileExists, and watchFil...

CVE-2026-114606

draw.io Desktop is the official Electron build of draw.io. Prior to 31.4.4, draw.io Desktop is vulnerable to arbitrary local-file disclosure through the Electron main process's read-side IPC handlers. The readFile, getFileDrafts, getBkpFile, fileStat, isFileWritable, checkFileExists, and watchFil...

CVE-2026-114606 draw.io Desktop: Arbitrary local-file read via read-side IPC (no blessed-path gate)

draw.io Desktop is the official Electron build of draw.io. Prior to 31.4.4, draw.io Desktop is vulnerable to arbitrary local-file disclosure through the Electron main process's read-side IPC handlers. The readFile, getFileDrafts, getBkpFile, fileStat, isFileWritable, checkFileExists, and watchFil...

CVE-2026-114606

Versions of draw.io Desktop prior to 31.4.4 are vulnerable to arbitrary local-file disclosure . The root cause is an authorization asymmetry in the Electron main process's read-side IPC handlers. While write-side handlers (such as saveFile and writeFile) are protected by assertWritablePath, the r...

Insecure Default Initialization of Resource

Overview @storybook/core-server is a Storybook framework-agnostic API Affected versions of this package are vulnerable to Insecure Default Initialization of Resource via the Vitest plugin in storybookTest, where allowWrite and allowExec permissions are not applied to the resolved project config...

Insecure Default Initialization of Resource

Overview @storybook/addon-vitest is a Storybook Vitest addon: Blazing fast component testing using stories Affected versions of this package are vulnerable to Insecure Default Initialization of Resource via the Vitest plugin in storybookTest, where allowWrite and allowExec permissions are not...

Insecure Default Initialization of Resource

Overview @storybook/experimental-addon-test is an Integrate Vitest with Storybook Affected versions of this package are vulnerable to Insecure Default Initialization of Resource via the Vitest plugin in storybookTest, where allowWrite and allowExec permissions are not applied to the resolved...

Insecure Default Initialization of Resource

Overview storybook is a frontend workshop for building UI components and pages in isolation. Affected versions of this package are vulnerable to Insecure Default Initialization of Resource via the Vitest plugin in storybookTest, where allowWrite and allowExec permissions are not applied to the...

Insecure Default Initialization of Resource

Overview @storybook/core is a Storybook framework-agnostic API Affected versions of this package are vulnerable to Insecure Default Initialization of Resource via the Vitest plugin in storybookTest, where allowWrite and allowExec permissions are not applied to the resolved project config when usi...

Insecure Default Initialization of Resource

Overview @storybook/addon-mcp is a Help agents automatically write and test stories for your UI components Affected versions of this package are vulnerable to Insecure Default Initialization of Resource via the Vitest plugin in storybookTest, where allowWrite and allowExec permissions are not...