CVE-2026-78323 Jss: jss: jsstrustmanager does not verify nss trust flags on ca certificates

A flaw was found in JSS Java Security Services. The JSSTrustManager class does not verify NSS trust flags when validating CA certificates, allowing certificates present in the NSS database without TRUSTEDCA flags to be accepted as trust anchors for TLS connections. In non-default configurations...

CVE-2026-78323

CVE-2026-78323 affects JSS (Java Security Services) , specifically the JSSTrustManager class, which fails to verify NSS trust flags when validating CA certificates. As a result, certificates stored in the NSS database without TRUSTED_CA flags can be accepted as trust anchors for TLS connections. ...

EUVD-2026-64826

A flaw was found in JSS Java Security Services. The JSSTrustManager class does not verify NSS trust flags when validating CA certificates, allowing certificates present in the NSS database without TRUSTEDCA flags to be accepted as trust anchors for TLS connections. In non-default configurations...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: cpu: Re-enable CPU mitigations by default for !X86 architectures. Rename the configuration for x86 to CPUMITIGATIONS, define it in the generic code, and apply it to all architectures except x86. A recent commit that turned...

PT-2026-80803

A flaw was found in JSS Java Security Services. The JSSTrustManager class does not verify NSS trust flags when validating CA certificates, allowing certificates present in the NSS database without TRUSTED CA flags to be accepted as trust anchors for TLS connections. In non-default configurations...

CVE-2026-74709

In the Linux kernel, the following vulnerability has been resolved: xsk: clear metadata pointer when no timestamp is requested User space can change metadata flags after request processing. Rereading them during completion can therefore make the kernel write a timestamp that was not requested whe...

EUVD-2026-64396

In the Linux kernel, the following vulnerability has been resolved: xsk: clear metadata pointer when no timestamp is requested User space can change metadata flags after request processing. Rereading them during completion can therefore make the kernel write a timestamp that was not requested whe...

CVE-2026-74709

CVE-2026-74709 affects the AF_XDP (xsk) subsystem in the Linux kernel. The root cause is that user space can modify metadata flags after a TX request has been processed; when the kernel rereads those flags during completion, it may write a timestamp into the metadata area that was never requested...

CVE-2026-74709 xsk: clear metadata pointer when no timestamp is requested

In the Linux kernel, the following vulnerability has been resolved: xsk: clear metadata pointer when no timestamp is requested User space can change metadata flags after request processing. Rereading them during completion can therefore make the kernel write a timestamp that was not requested whe...

CVE-2026-74709 xsk: clear metadata pointer when no timestamp is requested

In the Linux kernel, the following vulnerability has been resolved: xsk: clear metadata pointer when no timestamp is requested User space can change metadata flags after request processing. Rereading them during completion can therefore make the kernel write a timestamp that was not requested whe...

Linux Distros Unpatched Vulnerability : CVE-2026-74709

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xsk: clear metadata pointer when no timestamp is requested User space can change metadata flags after request processing. Rereading them during completion can...

JLSEC-2026-1356 Wasmtime has a possible panic when lifting `flags` component value

Impact Wasmtime contains a possible panic which can happen when a flags-typed component model value is lifted with the Val type. If bits are set outside of the set of flags the component model specifies that these bits should be ignored but Wasmtime will panic when this value is lifted. This pani...

CVE-2026-70657

Copyparty , a portable file server, is affected by a file/dirkey confusion vulnerability prior to version 1.20.17 . When a volume has both directory-key flags (dk/dks) and file-key flags (fk/fka) simultaneously enabled, a valid file key can be converted into a directory key, granting read access ...

K000162968: PackageKit vulnerability CVE-2026-41651

Security Advisory Description PackageKit is a a D-Bus abstraction layer that allows the user to manage packages in a secure way using a cross-distro, cross-architecture API. PackageKit between and including versions 1.0.2 and 1.3.4 is vulnerable to a time-of-check time-of-use TOCTOU race conditio...

CVE-2026-10527 Boards plugin retains Board Admin rights for users demoted to System Guest

Mattermost versions 11.7.x = 11.7.6, 10.11.x = 10.11.21, 11.8.x = 11.8.3 fails to reconcile SchemeAdmin flags with a user's current role which allows a user demoted to System Guest to retain Board Admin privileges and perform admin-only operations via the Boards REST API or UI.. Mattermost Adviso...

CVE-2026-10527: Incorrect Authorization

Mattermost versions 11.7.x = 11.7.6, 10.11.x = 10.11.21, 11.8.x = 11.8.3 fails to reconcile SchemeAdmin flags with a user's current role which allows a user demoted to System Guest to retain Board Admin privileges and perform admin-only operations via the Boards REST API or UI.. Mattermost Adviso...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100573)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100573 advisory. In the Linux kernel, the following vulnerability has been resolved: signal: clear JOBCTLPENDINGMASK for caller in zapotherthreads When a multi-threaded process...

CVE-2026-74374

CVE-2026-74374 affects the Linux kernel’s md/raid1 and md/raid10 code paths. The fix replaces error-path detection that relied on r1_bio or raid10’s read_slot with md_cloned_bio(), addressing cases where the error path is NULL or -1 after bio splitting/resubmission. The consequence previously cou...

CVE-2026-72351 gue: validate REMCSUM private option length

In the Linux kernel, the following vulnerability has been resolved: gue: validate REMCSUM private option length GUE private flags can indicate that remote checksum offload metadata is present. The private flags field itself is accounted for by guehdrflagslen, but guehdrprivflagslen currently...

SUSE CVE-2026-68387

In the Linux kernel, the following vulnerability has been resolved: can: raw: add locking for raw flags bitfield With commit 890e5198a6e5 "can: raw: use bitfields to store flags in struct rawsock" the formerly separate integer values have been integrated into a single bitfield. This led to a...