Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102034)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102034 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: serial: digiacceleport: fix write buffer corruption The digiwriteinbcommand is supposed to...

Python Library sqlparse < 0.6.0 Multiple Vulnerabilities

The version of the sqlparse Python library installed on the remote host is prior to 0.6.0. It is, therefore, affected by multiple vulnerabilities: - A denial of service vulnerability exists in sqlparse due to the regular expressions used by the lexer to match dollar-quoted strings and multiline...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001493)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001493 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dbg-tlv: ensure NUL termination The iwlfwinidebuginfotlv is used as a string, so w...

MINI-267M-2PFX-H2RH

Bulletin has no description...

MINI-6XX3-CJCP-8MX7

Bulletin has no description...

CVE-2026-77648

In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass importfilteringopts, allowing an admin to fetch internal URLs from the Glance service network aka SSRF, as long as https:// or http:// is used. This API has been available only to admins since Xena, and it...

CVE-2026-74955

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Request Handling component...

CVE-2026-74397

A flaw was found in the Linux kernel's InfiniBand IB Mellanox 5 mlx5 driver. This vulnerability occurs when the driver allocates a transport domain but fails to properly deallocate it if a subsequent operation encounters an error. This oversight leads to a resource leak, which could potentially...

CVE-2026-74971

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the DOM: UI Events & Focus Handling component...

USN-8657-1 vim vulnerabilities

It was discovered that Vim incorrectly handled memory when decoding certain JSON input. An attacker could possibly use this issue to cause Vim to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. CVE-2026-73071 Yazan Balawn...

USN-8657-1: Vim vulnerabilities

It was discovered that Vim incorrectly handled memory when decoding certain JSON input. An attacker could possibly use this issue to cause Vim to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. CVE-2026-73071 Yazan Balawn...

CVE-2026-16991 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper handling of symbolic links...

CVE-2026-16991

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 are vulnerable to local privilege escalation caused by improper handling of symbolic links; a low-privilege local attacker can exploit this to gain full confidentiality, integrity, and availability impact (CVSS 7.8 HIGH). No exploit or patch details are provid...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal through the restore path handling in lib/backup/actions/restore.go, lib/backup/common/part.go, and lib/backup/fslocal/fslocal.go. An attacker can write or overwrite files outside the configured -storageDataPath by...

CVE-2026-74386

A flaw was found in the nvmet-tcp component of the Linux kernel. A remote attacker could repeatedly open and close connections, causing a page fragment cache leak. This vulnerability occurs when a connection is closed during the allocation process, leading to memory not being properly released...

CVE-2026-28984

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling. Mitigation Do not process or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the following packages require WebKitGTK4:...

CVE-2026-53586 libgit2: HTTP transport can leak credentials to an offsite redirect target

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, the built-in HTTP transport in src/libgit2/transports/http.c follows an offsite initial redirect, an...

AZL-97536 CVE-2026-63382 affecting package mysql for versions less than 8.0.46-2

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, the libevent evhttp parser in http.c inconsistently handles duplicate Transfer-Encoding headers, comma-separated Transfer-Encoding values, and bare line feeds in chunked framing. evhttpfindheader can select only the first...

EUVD-2026-63571

django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. From 5.0.8 until 5.0.9, ContentRenderer.renderplaceholder in cms/pluginrendering.py can pass stored, attacker-controlled values to ContentRenderer.renderexception when plugin rendering fail...

CVE-2026-63385 Libevent: HTTP header handling bugs create risk of access control bypass.

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has two HTTP parsing weaknesses in http.c. evhttpdecodeuriinternal decodes percent-encoded %00 bytes into literal NUL characters, which can cause downstream C string operations to truncate a path and bypass...