CLSA-2026-1780879898 TuxCare security update for 2 packages (1 CVE)

TuxCare rebuilt 2 packages to address 1 CVE. Fixed in 2.22.4.post4+tuxcare...

CLSA-2026-1780447822 TuxCare security update for mlflow (2 CVEs)

TuxCare rebuilt mlflow to address 2 CVEs. Fixed in 2.9.1.post3+tuxcare...

CLSA-2026-1774830249 TuxCare security update for mlflow (5 CVEs)

TuxCare rebuilt mlflow to address 5 CVEs. Fixed in 2.9.1.post1+tuxcare...

PT-2023-3707 · Mlflow · Mlflow

Name of the Vulnerable Software and Affected Versions: MLflow versions prior to 2.5.0 Description: The issue exists due to incorrect restriction of the path name to a directory with limited access in the validate path is safe function of the MLflow platform. This can allow a remote attacker to...