UBUNTU-CVE-2026-31968

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data using a variety of encodings and compression methods. For the VARINT and CONST encodings, incomplete validation of the context in which the encodings were...

OPENSUSE-SU-2026:20394-1 Security update for mumble

This update for mumble fixes the following issues: Changes in mumble: - CVE-2025-71264: opus incorrect size calculations allow for an out-of-bounds array access and can lead to a client crash boo1259721 - Update to version 1.5.857: fixes for undesired ACL behavior Client bug fixes: UI, memory...

CVE-2026-31968 HTSlib CRAM decoder vulnerable to buffer overflow

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data using a variety of encodings and compression methods. For the VARINT and CONST encodings, incomplete validation of the context in which the encodings were...

CVE-2026-31966 HTSlib CRAM reader has out-of-bounds read due to improper validation of input

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data. As one method of removing redundant data, CRAM uses reference-based compression so that instead of storing the full sequence for each alignment record it...

CVE-2026-31965

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data. In the cramdecodeslice function called while reading CRAM records, validation of the reference id field occurred too late, allowing two out of bounds read...

GHSA-G2PF-WW5M-2R9M Zitadel is missing enforcement of organization scopes

Summary A vulnerability in Zitadel's OAuth2/OIDC interface, which allowed users to bypass organization enforcement during authentication. Impact Zitadel allows applications to enforce an organzation context during authentication using scopes urn:zitadel:iam:org:id:id and...

Important: Red Hat Security Advisory: Red Hat Quay 3.12.15

Red Hat Quay 3.12.15 is now available with bug fixes. Quay 3.12.15...

USN-8098-3 linux-aws, linux-aws-5.4, linux-gcp-5.4, linux-oracle, linux-oracle-5.4, linux-xilinx-zynqmp vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.24 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

python27:2.7 security and bug fix update

An update is available for python-mock, module.python-sqlalchemy, python-backports-sslmatchhostname, python-attrs, python-chardet, python2-rpm-macros, module.numpy, module.python-mock, python-pymongo, python-markupsafe, python-psycopg2, python2-six, module.python-funcsigs, module.python-pygments,...

grub2 security update

2.06-114.0.1.el97.1 - Update grub2 dependencies to match new Secure Boot certificate chain of trust Orabug: 37766761 - Fix typo in SBAT metadata Orabug: 37693946 - Allow installation of grub2 only with shim-aa64 that allows booting it Orabug: 37693946 - net/dns: Fix removal of DNS server Orabug:...

Virtuozzo Infrastructure 7.2 Hotfix 2 (7.2.0-258) (formerly Virtuozzo Hybrid Infrastructure)

This update delivers important stability fixes and includes a product name change. Vulnerability id: VSTOR-122117 Improved monitoring and dashboard responsiveness on large clusters by optimizing metric caching. Vulnerability id: VSTOR-124715 Updates could fail on nodes with floppy drives...

Stable Channel Update for Desktop

The Stable channel has been updated to 146.0.7680.153/154 for Windows/Mac and 146.0.7680.153 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details and links may be kept...

RHEL 8 : java-1.8.0-ibm (RHSA-2026:4832)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:4832 advisory. IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. Security Fixes: openjdk: Improve...

OPENSUSE-SU-2026:10388-1 mumble-1.5.857-2.1 on GA media

These are all security issues fixed in the mumble-1.5.857-2.1 package on the GA media of openSUSE Tumbleweed...

EulerOS Virtualization 2.13.0 : kernel (EulerOS-SA-2026-1629)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : scsi: target: Fix WRITESAME No Data Buffer crashCVE-2022-21546 iommu/arm-smmu-v3-sva: Fix mm use-after-freeCVE-2022-49426 module: f...

Security update for chromium (critical)

openSUSE security update: security update for chromium ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20372-1 Rating: critical References: bsc1259530 bsc1259648 bsc1259659 Cross-References: CVE-2026-3909 CVE-2026-3910 CVE-2026-3913 CVE-2026-3914...

OPENSUSE-SU-2026:10387-1 kernel-devel-6.19.8-1.1 on GA media

These are all security issues fixed in the kernel-devel-6.19.8-1.1 package on the GA media of openSUSE Tumbleweed...

Security update for docker-stable (important)

openSUSE security update: security update for docker-stable ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20366-1 Rating: important References: bsc1240513 bsc1253904 bsc1254206 Cross-References: CVE-2025-30204 CVE-2025-58181 CVSS scores:...

RHEL 8 : Red Hat JBoss Enterprise Application Platform 7.4.24 (RHSA-2026:4916)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:4916 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release o...