OPENSUSE-SU-2026:11964-1 helm3-3.22.0-3.1 on GA media

These are all security issues fixed in the helm3-3.22.0-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11953-1 aliyun-cli-3.5.1-2.1 on GA media

These are all security issues fixed in the aliyun-cli-3.5.1-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11972-1 python313-jwcrypto-1.6.1-1.1 on GA media

These are all security issues fixed in the python313-jwcrypto-1.6.1-1.1 package on the GA media of openSUSE Tumbleweed...

mako TemplateLookup Function Unauthenticated Access

The vulnerability of the TemplateLookup.gettemplate function in the mako/lookup.py file of the Sqlalchemy mako template library in Python is related to an incorrect path name limitation for accessing restricted directories. Exploiting this vulnerability could allow an attacker to gain unauthorize...

PT-2026-104289

Name of the Vulnerable Software and Affected Versions Apache Thrift C++ library versions 0.7.0 through 0.24.0 Apache Thrift D library versions 0.9.0 through 0.24.0 Description Improper validation of certificates with host mismatches occurs in the C++ and D libraries. The default access manager fo...

UBUNTU-CVE-2026-73856

GHSA-vmg8-j66p-vgvw: Response body inspection bypass via non-canonical Content-Type casing...

UBUNTU-CVE-2026-61812

GHSA-cxqf-vgrr-xxrv: HTML decoder missing entities, leading to evasion...

UBUNTU-CVE-2026-61813

GHSA-2vqc-36qp-ccmw: Weak libcurl TLS hostname verification setting when fetching over HTTPS...

OPENSUSE-SU-2026:11978-1 yast2-users-5.0.9-1.1 on GA media

These are all security issues fixed in the yast2-users-5.0.9-1.1 package on the GA media of openSUSE Tumbleweed...

CLSA-2026-1790893546 TuxCare security update for fast-uri (1 CVE)

TuxCare rebuilt fast-uri to address 1 CVE. Fixed in 3.1.2-tuxcare.3...

CLSA-2026-1790890883 TuxCare security update for ip-address (3 CVEs)

TuxCare rebuilt ip-address to address 3 CVEs. Fixed in 7.1.0-tuxcare.4...

CLSA-2026-1790889495 TuxCare security update for fastify (1 CVE)

TuxCare rebuilt fastify to address 1 CVE. Fixed in 5.2.1-tuxcare.3...

CLSA-2026-1790889438 TuxCare security update for axios (2 CVEs)

TuxCare rebuilt axios to address 2 CVEs. Fixed in 0.33.0-tuxcare.4...

CLSA-2026-1790888307 TuxCare security update for piscina (1 CVE)

TuxCare rebuilt piscina to address 1 CVE. Fixed in 4.8.0-tuxcare.1...

CLSA-2026-1790888294 TuxCare security update for brace-expansion (1 CVE)

TuxCare rebuilt brace-expansion to address 1 CVE. Fixed in 1.1.16-tuxcare.3...

CLSA-2026-1790888237 TuxCare security update for devalue (1 CVE)

TuxCare rebuilt devalue to address 1 CVE. Fixed in 5.9.0-tuxcare.1...

CLSA-2026-1790888210 TuxCare security update for devalue (5 CVEs)

TuxCare rebuilt devalue to address 5 CVEs. Fixed in 5.9.2-tuxcare.1...

GO-2026-6554 OpenBao Agent Writes Secrets to Stdout in github.com/openbao/openbao

OpenBao Agent Writes Secrets to Stdout in github.com/openbao/openbao...

GO-2026-6579 OpenBao Skips Stricter Deny Policy for LIST operations in github.com/openbao/openbao

OpenBao Skips Stricter Deny Policy for LIST operations in github.com/openbao/openbao...

CVE-2026-53964

Document Merge Service is a document template merge service providing an API to manage templates and merge them with given data. Prior to version 9.1.0, a remote code execution RCE via server-side template injection SSTI allows for user supplied code to be executed in the server's context where i...