Security Bulletin: Security Vulnerability in Spring Boot Affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2025-22235)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the security vulnerability in Spring Boot Vulnerability Details CVEID:CVE-2025-22235 DESCRIPTION: EndpointRequest.to creates a matcher for null/ if the actuator endpoint, for which the EndpointRequest has been create...

SUSE CVE-2026-72245

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix device reference leak in host1xdeviceparsedt error path After deviceinitialize, the embedded struct device in struct host1xdevice should be released through the device core with putdevice. In host1xdeviceadd, if...

Security Bulletin: Security Vulnerability in Netty affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2025-67735)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to Netty Vulnerability Details CVEID:CVE-2025-67735 DESCRIPTION: Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.129.Final and 4.2.8.Final, the...

PT-2026-82977

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the driver core where the dev has sync state function reads the dev-driver variable twice without holding the device lock. This occurs during a NULL check and the...

PT-2026-83494

Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description An inconsistent canonicalization process occurs when ignore path parameters in path matching is enabled. T...

OPENSUSE-SU-2026:11631-1 jfrog-cli-2.122.0-1.1 on GA media

These are all security issues fixed in the jfrog-cli-2.122.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11627-1 bzip2-1.0.8-6.1 on GA media

These are all security issues fixed in the bzip2-1.0.8-6.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11636-1 wicked-0.6.80-2.1 on GA media

These are all security issues fixed in the wicked-0.6.80-2.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-83484

Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description Envoy matches raw request paths, whereas servlet backends like Apache Tomcat strip semicolon matrix...

PT-2026-83337

IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 is vulnerable to a denial of service due to improper limitation of resources...

PT-2026-83482

Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description The HTTP external-authorization client can retain a stale request callback after a request is rejected. Wh...

PT-2026-83487

Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description The /stats?format=html admin endpoint uses StatsHtmlRender, which fails to HTML-encode statistic names. A...

PT-2026-83491

Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description An unauthenticated client can trigger an out-of-memory condition by exploiting how the proxy handles HTTP/...

PT-2026-83492

Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description URL normalization fails to recognize dot . and dot-dot .. path segments when they contain semicolon...

PT-2026-83486

Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description When the optional oghttp2 upstream HTTP/2 codec is enabled, the software accepts a response trailer HEADER...

PT-2026-83489

Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description An unauthenticated HTTP/2 client can exploit the way the proxy forwards data for configured non-WebSocket...

OPENSUSE-SU-2026:11628-1 chromedriver-152.0.7977.64-1.1 on GA media

These are all security issues fixed in the chromedriver-152.0.7977.64-1.1 package on the GA media of openSUSE Tumbleweed...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: datanucleus-api-jdo (UTSA-2026-093015)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093015 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: wildfly-security-manager (UTSA-2026-030642)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-030642 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wildfly-common (UTSA-2026-093013)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093013 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...