137185 matches found
CLSA-2026-1787546974 TuxCare security update for log4j:log4j (1 CVE)
TuxCare rebuilt log4j:log4j to address 1 CVE. Fixed in 1.2.14-tuxcare.1...
SUSE-RU-2026:3712-1 Security update 5.1.5 for Multi-Linux Manager Server
This update fixes the following issues: Release Notes Highlights: - Update to SUSE Multi-Linux Manager 5.1.5 Added known issue for missing BasicConstraints Critical flag Added a note about disk-check parameters semantics change Added a note about enabling FIPS mode after installing SUSE Multi-Lin...
CSV Injection
Overview exceljs is a package to Read, manipulate and write spreadsheet data and styles to XLSX and JSON. Affected versions of this package are vulnerable to CSV Injection through the CSV.write process in lib/csv/csv.js. An attacker can trigger spreadsheet formula execution by supplying a cell...
CVE-2026-78205
BentoML's outbound connection safeguard makesafeconnect in internal/utils/uri.py blocks private, loopback, and link-local IP addresses but fails to reject the RFC 6598 shared address space 100.64.0.0/10, CGNAT. In versions 1.4.19 through 1.4.39, an unauthenticated attacker can supply URLs pointin...
CVE-2026-78205 BentoML 1.4.19 through 1.4.39 Server-Side Request Forgery via Unfiltered RFC 6598 Shared Address Space
BentoML's outbound connection safeguard makesafeconnect in internal/utils/uri.py blocks private, loopback, and link-local IP addresses but fails to reject the RFC 6598 shared address space 100.64.0.0/10, CGNAT. In versions 1.4.19 through 1.4.39, an unauthenticated attacker can supply URLs pointin...
EUVD-2026-64680
BentoML's outbound connection safeguard makesafeconnect in internal/utils/uri.py blocks private, loopback, and link-local IP addresses but fails to reject the RFC 6598 shared address space 100.64.0.0/10, CGNAT. In versions 1.4.19 through 1.4.39, an unauthenticated attacker can supply URLs pointin...
NetworkManager security update
1.54.3-5.0.1 - Introduce always-ignore-carrier setting Orabug: 39663315 - disable MPTCP handling by default Orabug: 34801142 - add connectivity check via Oracle servers Orabug: 32051972 - Add a dropin file to make Networkmanager-dispatcher persistent Orabug: 36989910 - Drop 777 permissions from t...
OPENSUSE-SU-2026:11586-1 python313-msgpack-1.2.1-1.1 on GA media
These are all security issues fixed in the python313-msgpack-1.2.1-1.1 package on the GA media of openSUSE Tumbleweed...
grafana security, bug fix, and enhancement update
10.2.6-23 - Resolves RHEL-183803: CVE-2026-39821 - Resolves RHEL-188280...
PT-2026-80914
Name of the Vulnerable Software and Affected Versions NetworkManager affected versions not specified Description NetworkManager failed to apply the private user restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This allows an unprivileged local user to...
OPENSUSE-SU-2026:11584-1 expat-2.8.2-1.1 on GA media
These are all security issues fixed in the expat-2.8.2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11588-1 python313-pypdf-6.16.2-1.1 on GA media
These are all security issues fixed in the python313-pypdf-6.16.2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11585-1 python313-mistune-3.3.4-1.1 on GA media
These are all security issues fixed in the python313-mistune-3.3.4-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-79798
BentoML's outbound connection safeguard make safe connect in internal/utils/uri.py blocks private, loopback, and link-local IP addresses but fails to reject the RFC 6598 shared address space 100.64.0.0/10, CGNAT. In versions 1.4.19 through 1.4.39, an unauthenticated attacker can supply URLs...
ROOT-OS-DEBIAN-13-CVE-2025-49506 CVE-2025-49506 in apr-util - Patched by Root
Root has patched CVE-2025-49506 in the apr-util package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-52929 CVE-2026-52929 in linux - Patched by Root
Root has patched CVE-2026-52929 in the linux package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2025-38039 CVE-2025-38039 in linux - Patched by Root
Root has patched CVE-2025-38039 in the linux package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2025-39873 CVE-2025-39873 in linux - Patched by Root
Root has patched CVE-2025-39873 in the linux package for Root:Debian:11. Multiple fixed versions available...