Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale and the HDFS layer are now fixed in 5.2.3.10 or higher and 6.0.1.1 or higher

Summary The following vulnerabilities, which can affect IBM Storage Scale and the HDFS layer and could provide weaker-than-expected security, are now fixed in Storage Scale 5.2.3.10 or higher and 6.0.1.1 or higher Vulnerability Details CVEID:CVE-2026-46340 DESCRIPTION: Netty is a network...

Rocky Linux 10.2 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_25191)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202625191 advisory. kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service CVE-2026-31419 kernel: Linux kernel: Denial of Service in erofs...

Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale and the HDFS layer are now addressed in 5.2.3.9 or higher and 6.0.1.1 or higher

Summary The following vulnerabilities, which can affect IBM Storage Scale and the HDFS layer and could provide weaker-than-expected security, are now addressed in Storage Scale 5.2.3.9 or higher and 6.0.1.1 or higher. CVE-2026-41417, CVE-2026-42580, CVE-2026-42581, CVE-2026-42584, CVE-2026-42585,...

Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale and the HDFS layer are now addressed in 5.2.3.8 or higher and 6.0.1.1 or higher

Summary The following vulnerabilities, which can affect IBM Storage Scale and the HDFS layer and could provide weaker-than-expected security, are now addressed in Storage Scale 5.2.3.8 or higher and 6.0.1.1 or higher. CVE-2026-33558, CVE-2026-2332, CVE-2026-33870, CVE-2025-11143 Vulnerability...

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Apache Hadoop

Summary Multiple vulnerabilities in Apache Hadoop that is used by InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2014-0229 DESCRIPTION: Apache Hadoop 0.23.x before 0.23.11 and 2.x before 2.4.1, as used in Cloudera CDH 5.0.x before 5.0.2, do not check authorization f...

Apache HDFS Provider error message suggested

In the Apache Airflow HDFS Provider, versions prior to 4.1.1, a documentationinfo pointed users to an install incorrect pip package. As this package name was unclaimed, in theory, an attacker could claim this package and provide code that would be executed when this package was installed. The...

PYSEC-2026-1138 Apache HDFS Provider error message suggested

In the Apache Airflow HDFS Provider, versions prior to 4.1.1, a documentation info pointed users to an install incorrect pip package. As this package name was unclaimed, in theory, an attacker could claim this package and provide code that would be executed when this package was installed. The...

NLLog: Lightweight, Explainable SOC Anomaly Detection Via Log-To-Language Rewriting

System-generated logs underpin security monitoring, yet their rigid template-based format hinders both automated analysis and human comprehension. We present NLLog Natural-Language Log, a lightweight pipeline that deterministically rewrites parsed templates into WHO-WHAT-SEVERITY sentences, pools...

CVE-2026-31226

The TinyZero project thru commit 6652a63c57fa7e5ccde3fc9c598c7176ff15b839 2025-58-24 contains a critical command injection vulnerability CWE-78 in its HDFS file operation utilities. The vulnerability arises from the unsafe construction and execution of shell commands via os.system without proper...

CVE-2026-31226: Improper Neutralization of Special Elements used in an OS Command

The TinyZero project thru commit 6652a63c57fa7e5ccde3fc9c598c7176ff15b839 2025-58-24 contains a critical command injection vulnerability CWE-78 in its HDFS file operation utilities. The vulnerability arises from the unsafe construction and execution of shell commands via os.system without proper...

CVE-2026-31226

The TinyZero project, through commit 6652a63c57fa7e5ccde3fc9c598c7176ff15b839 (2025-08-24), contains a critical command injection vulnerability (CWE-78) within its HDFS file operation utilities . The flaw exists because the _copy() function unsafely constructs and executes shell commands using os...

CVE-2026-31226

The TinyZero project thru commit 6652a63c57fa7e5ccde3fc9c598c7176ff15b839 2025-58-24 contains a critical command injection vulnerability CWE-78 in its HDFS file operation utilities. The vulnerability arises from the unsafe construction and execution of shell commands via os.system without proper...

CVE-2026-31226

The TinyZero project thru commit 6652a63c57fa7e5ccde3fc9c598c7176ff15b839 2025-58-24 contains a critical command injection vulnerability CWE-78 in its HDFS file operation utilities. The vulnerability arises from the unsafe construction and execution of shell commands via os.system without proper...

ai.h2o:h2o-algos (0.2.3.5), ai.h2o:h2o-app (0.2.3.5) +2 more potentially affected by CVE-2026-3960 via ai.h2o:h2o-core (0.2.3.5)

ai.h2o:h2o-core MAVEN version 0.2.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on ai.h2o:h2o-core and may be impacted: - ai.h2o:h2o-algos 0.2.3.5 - ai.h2o:h2o-app 0.2.3.5 - ai.h2o:h2o-persist-hdfs 0.2.3.5 - ai.h2o:h2o-scala2.10 0.2.3.5 Source cves:...

ai.h2o:h2o-algos (0.2.3.6), ai.h2o:h2o-app (0.2.3.6) +2 more potentially affected by CVE-2026-3960 via ai.h2o:h2o-core (0.2.3.6)

ai.h2o:h2o-core MAVEN version 0.2.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on ai.h2o:h2o-core and may be impacted: - ai.h2o:h2o-algos 0.2.3.6 - ai.h2o:h2o-app 0.2.3.6 - ai.h2o:h2o-persist-hdfs 0.2.3.6 - ai.h2o:h2o-scala2.10 0.2.3.6 Source cves:...

org.apache.ranger:conditions-enrichers (1.2.0), org.apache.ranger:embeddedwebserver (1.2.0) +25 more potentially affected by CVE-2025-59059 via org.apache.ranger:ranger-plugins-common (1.2.0)

org.apache.ranger:ranger-plugins-common MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.ranger:ranger-plugins-common and may be impacted: - org.apache.ranger:conditions-enrichers 1.2.0 - org.apache.ranger:embeddedwebserve...

Out-of-bounds Write

org.apache.hadoop:hadoop-hdfs-native-client is vulnerable to Out-of-bounds Write. The vulnerability is due to improper bounds checking in the HDFS native client, which allows an attacker to trigger memory corruption by writing outside allocated buffers, potentially leading to denial of service or...

ai.h2o:h2o-algos (0.2.3.5), ai.h2o:h2o-app (0.2.3.5) +2 more potentially affected by CVE-2024-5986 via ai.h2o:h2o-core (0.2.3.5)

ai.h2o:h2o-core MAVEN version 0.2.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on ai.h2o:h2o-core and may be impacted: - ai.h2o:h2o-algos 0.2.3.5 - ai.h2o:h2o-app 0.2.3.5 - ai.h2o:h2o-persist-hdfs 0.2.3.5 - ai.h2o:h2o-scala2.10 0.2.3.5 Source cves:...

ai.h2o:h2o-algos (0.2.3.6), ai.h2o:h2o-app (0.2.3.6) +2 more potentially affected by CVE-2024-5986 via ai.h2o:h2o-core (0.2.3.6)

ai.h2o:h2o-core MAVEN version 0.2.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on ai.h2o:h2o-core and may be impacted: - ai.h2o:h2o-algos 0.2.3.6 - ai.h2o:h2o-app 0.2.3.6 - ai.h2o:h2o-persist-hdfs 0.2.3.6 - ai.h2o:h2o-scala2.10 0.2.3.6 Source cves:...

CVE-2025-27821

Out-of-bounds Write vulnerability in Apache Hadoop HDFS native client. This issue affects Apache Hadoop: from 3.2.0 before 3.4.2. Users are recommended to upgrade to version 3.4.2, which fixes the issue...