12213 matches found
GHSA-956X-8GVW-WG5V GitPython: command injection via unguarded Git options in `Repo.archive()`, `git.ls_remote()`, and arbitrary file overwrite via `Repo.iter_commits()` / `Repo.blame()`
Summary GitPython already know that --upload-pack / --exec are command-exec vectors, they are denylist in git/remote.py:535 and check by Git.checkunsafeoptions git/cmd.py:963, the thing is this check him he is only call from fetch, pull, push and clonefrom, everything else who build a git argv fr...
GitPython unsafe clone option gate bypass through joined short options
GitPython version 3.1.50 blocks unsafe git clone options such as --upload-pack, -u, --config, and -c unless callers explicitly pass allowunsafeoptions=True. However, the default unsafe-option gate does not recognize joined short-option forms such as -u/path/to/helper. Git itself accepts -u as the...
GHSA-V396-V7Q4-X2QJ GitPython unsafe clone option gate bypass through joined short options
GitPython version 3.1.50 blocks unsafe git clone options such as --upload-pack, -u, --config, and -c unless callers explicitly pass allowunsafeoptions=True. However, the default unsafe-option gate does not recognize joined short-option forms such as -u/path/to/helper. Git itself accepts -u as the...
Security Bulletin: TS4500 CLI tool addresses security vulnerability CVE-2026-16107
Summary The TS4500 CLI tool used an insecure SSL configuration that did not properly validate server certificates, potentially allowing attackers to intercept communications through a Man-in-the-Middle MitM attack. The issue has been resolved by enforcing proper SSL certificate validation during...
CVE-2026-8593 Fix Business Intelligence API Pack permission
Improper permission enforcement in Checkmk versions 2.5.0 before 2.5.0p9, 2.4.0 before 2.4.0p34, 2.3.0 before 2.3.0p49, and 2.2.0 EOL allows users without permissions to view and modify BI packs and rules...
CVE-2026-63818
In the Linux kernel, the following vulnerability has been resolved: f2fs: validate orphan inode entry count f2fsrecoverorphaninodes trusts the orphan block entrycount when replaying orphan inodes from the checkpoint pack. A corrupted entrycount larger than F2FSORPHANSPERBLOCK makes the recovery...
SUSE SLES12 Security Update : python-dulwich (SUSE-SU-2026:3117-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3117-1 advisory. This update for python-dulwich fixes the following issue - CVE-2026-47734: Unbounded memory allocation in receive-pack from crafted thin pac...
io.camunda:camunda-zeebe (>=8.9.0-alpha5-rc1, <=8.10.0-alpha1), org.finos.legend.engine:legend-engine-xt-relationalstore-aurora-execution (>=4.128.0, <=4.151.3) +3 more potentially affected by CVE-2026-11400 via software.amazon.jdbc:aws-advanced-jdbc-wrapper (>=3.2.0, <=4.0.0)
software.amazon.jdbc:aws-advanced-jdbc-wrapper MAVEN version =3.2.0, =8.9.0-alpha5-rc1, =4.128.0, =4.151.3 - org.wildfly:wildfly-datasources-galleon-pack 11.4.0.final - org.wildfly:wildfly-datasources-galleon-pack-common 11.4.0.final - org.wildfly:wildfly-datasources-preview-galleon-pack...
io.camunda:camunda-zeebe (>=8.9.0-alpha5-rc1, <=8.10.0-alpha1), org.finos.legend.engine:legend-engine-xt-relationalstore-aurora-execution (>=4.128.0, <=4.151.3) +3 more potentially affected by CVE-2026-11400 via software.amazon.jdbc:aws-advanced-jdbc-wrapper (>=3.2.0, <=4.0.0)
software.amazon.jdbc:aws-advanced-jdbc-wrapper MAVEN version =3.2.0, =8.9.0-alpha5-rc1, =4.128.0, =4.151.3 - org.wildfly:wildfly-datasources-galleon-pack 11.4.0.final - org.wildfly:wildfly-datasources-galleon-pack-common 11.4.0.final - org.wildfly:wildfly-datasources-preview-galleon-pack...
SUSE-SU-2026:3117-1 Security update for python-dulwich
This update for python-dulwich fixes the following issue - CVE-2026-47734: Unbounded memory allocation in receive-pack from crafted thin packs bsc1268138...
Security update for python-dulwich
This update for python-dulwich fixes the following issue CVE-2026-47734: Unbounded memory allocation in receive-pack from crafted thin packs bsc1268138. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...
perl: Fix of 2 CVEs
CVE-2026-13221: regex trie construction in Sstudychunk stored the branch-to-tail delta in a 16-bit field; an alternation of more than 65535 fixed-string branches overflowed it and produced silently incorrect matches GH23388 — decline the trie optimization when the span would overflow -...
SUSE SLES12 Security Update : kernel (Live Patch 78 for SUSE Linux Enterprise 12 SP5) (SUSE-SU-2026:3066-1)
The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3066-1 advisory. This update for the SUSE Linux Enterprise Kernel 4.12.14-122.296 fixes various security issues The following security issues were fixed: -...
Security Bulletin: The IBM Common Licensing IBM WebSphere Application Server Liberty could provide weaker than expected security
Summary IBM WebSphere Application Server Liberty could provide weaker than expected security administering security settings when the appSecurity-1.0, appSecurity-2.0, appSecurity-3.0, appSecurity-4.0 or appSecurity-5.0 feature is enabled. Vulnerability Details Refer to the security bulletins...
Security Bulletin: The IBM Common Licensing using IBM WebSphere Application Server Liberty is affected by a privilege escalation vulnerability
Summary IBM WebSphere Application Server Liberty is affected by a privilege escalation vulnerability with the restConnector-1.0 or restConnector-2.0 feature enabled. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affect...
Security Bulletin: The IBM Common Licensing using IBM WebSphere Application Server Liberty could provide weaker than expected security (CVE-2025-14923)
Summary IBM WebSphere Application Server could provide weaker than expected security when using the Security Utility to encode a secret. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions ---|---...
SUSE SLES12 Security Update : kernel (Live Patch 82 for SUSE Linux Enterprise 12 SP5) (SUSE-SU-2026:3011-1)
The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3011-1 advisory. This update for the SUSE Linux Enterprise Kernel 4.12.14-122.307 fixes various security issues The following security issues were fixed: -...
perl: Perl: Information disclosure via integer overflow in pack/unpack operations
A flaw was found in Perl. An integer overflow vulnerability in the Smeasurestruct function, specifically when handling pack and unpack templates with large repeat counts, can lead to an out-of-bounds heap read. This allows an attacker, by providing a specially crafted template, to read sensitive...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: dotnet9.0: aspnetcore-runtime-9.0-9.0.18-1.hum1 aarch64, x8664 aspnetcore-runtime-dbg-9.0-9.0.18-1.hum1 aarch64, x8664 aspnetcore-targeting-pack-9.0-9.0.18-1.hum1 aarch64, x8664...
