Security Bulletin: Vulnerability in gnutls affects IBM Netezza Appliance

Summary The gnutls package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2026-42012 Vulnerability Details CVEID:CVE-2026-42012 DESCRIPTION: A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially...

ROOT-APP-NPM-AIKIDO-2024-10106 AIKIDO-2024-10106 in pug-code-gen - Patched by Root

Root has patched AIKIDO-2024-10106 in the pug-code-gen package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2021-21353 CVE-2021-21353 in pug - Patched by Root

Root has patched CVE-2021-21353 in the pug package for Root:npm. Multiple fixed versions available...

MINI-MF2P-272P-4MVJ

Bulletin has no description...

MINI-3HJ9-RC4Q-JW39

Bulletin has no description...

MINI-8Q4F-9C6V-3MFP

Bulletin has no description...

CVE-2026-29036: Use of Incorrectly-Resolved Name or Reference

cJSON versions 1.5.0 through 1.7.19 contain an incorrectly-resolved name or reference vulnerability in the decodepointerinplace function within cJSONUtils.c that allows unauthenticated attackers to cause JSON Patch operations to target wrong object keys by supplying crafted JSON Pointer escape...

Linux Distros Unpatched Vulnerability : CVE-2026-73141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - svxlink - None Ubuntu Linux - GHSA-xmcv-mjpv-x46q: Audio decoders: stack VLA exhaustion CVE-2026-73141 Note that Nessus relies on the presence of...

Linux Distros Unpatched Vulnerability : CVE-2026-73147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - svxlink - None Ubuntu Linux - GHSA-pc2g-2p95-4cr5: TCL command injection in reflector client CVE-2026-73147 Note that Nessus relies on the presen...

Linux Distros Unpatched Vulnerability : CVE-2026-19349

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth2...

Linux Distros Unpatched Vulnerability : CVE-2026-73154

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - svxlink - None Ubuntu Linux - GHSA-5g48-xjmf-7p4q: StationData::setData stack overflow CVE-2026-73154 Note that Nessus relies on the presence of...

Linux Distros Unpatched Vulnerability : CVE-2026-73142

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - svxlink - None Ubuntu Linux - GHSA-5xr9-fmm8-7p8x: remotetrx NetUplink: connection object leak DoS CVE-2026-73142 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2026-73148

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - svxlink - None Ubuntu Linux - GHSA-6wgq-wg3w-jgvx: svxreflector: use-after-free write via dangling JSON reference CVE-2026-73148 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2026-71193

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Designate before 22.0.1, zone creation checks issubzone, issuperzone, and the duplicate- zone DB constraint are scoped to the target pool only. An...

OPENSUSE-SU-2026:11496-1 musescore-4.7.4-1.1 on GA media

These are all security issues fixed in the musescore-4.7.4-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-70929

Name of the Vulnerable Software and Affected Versions cJSON versions 1.5.0 through 1.7.19 Description An incorrectly-resolved name or reference issue exists in the decode pointer inplace function within cJSON Utils.c. Unauthenticated attackers can cause JSON Patch operations to target incorrect...

PT-2026-76424

These are all security issues fixed in the python313-scikit-learn-1.9.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-70240

Fooocus is an image generating software. In versions 2.5.5 and prior, the Fooocus web UI is vulnerable to remote code execution due to the unsafe use of eval when processing metadata JSON. An attacker with access to the Fooocus web UI may be able to execute arbitrary code on the instance. As of...

Linux Distros Unpatched Vulnerability : CVE-2026-73150

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - svxlink - None Ubuntu Linux - GHSA-4f8x-49pf-3x5v: Buffer overflow in APRS message construction CVE-2026-73150 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2026-73153

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - svxlink - None Ubuntu Linux - GHSA-624p-cp8x-6hp6: EchoLink RTCP/SDES: out-of-bounds read CVE-2026-73153 Note that Nessus relies on the presence ...