cockpit-files security update

An update is available for cockpit-files. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A filesystem browser for Cockpit Security Fixes: cockpit-files:...

RLSA-2026:98566 Moderate: cockpit-files security update

A filesystem browser for Cockpit Security Fixes: cockpit-files: cockpit-files: Arbitrary file ownership and permission modification via symlink race condition CVE-2026-91203 cockpit-files: cockpit-files: Arbitrary file ownership change via symlink following in privileged paste CVE-2026-91202...

Moderate: Red Hat Security Advisory: cockpit-files security update

An update for cockpit-files is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

RHEL 10 : cockpit-files (RHSA-2026:98566)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:98566 advisory. A filesystem browser for Cockpit Security Fixes: cockpit-files: cockpit-files: Arbitrary file ownership and permission modification via...

Rocky Linux 10.2 [CIQ] Security Update: cockpit-files Multiple Vulnerabilities (crlsa-2026_95570)

The Rocky Linux 10.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-202695570 advisory. cockpit-files: cockpit-files: Arbitrary file ownership and permission modification via symlink race condition CVE-2026-91203 cockpit-files:...

cockpit-files security update

An update is available for cockpit-files. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A filesystem browser for Cockpit Security Fixes: cockpit-files:...

RLSA-2026:95570 Moderate: cockpit-files security update

A filesystem browser for Cockpit Security Fixes: cockpit-files: cockpit-files: Arbitrary file ownership and permission modification via symlink race condition CVE-2026-91203 cockpit-files: cockpit-files: Arbitrary file ownership change via symlink following in privileged paste CVE-2026-91202...

AlmaLinux 10 : cockpit-files (ALSA-2026:95570)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:95570 advisory. cockpit-files: cockpit-files: Arbitrary file ownership and permission modification via symlink race condition CVE-2026-91203 cockpit-files: cockpit-file...

RockyLinux 10 : cockpit-files (RLSA-2026:95570)

The remote RockyLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2026:95570 advisory. cockpit-files: cockpit-files: Arbitrary file ownership and permission modification via symlink race condition CVE-2026-91203 cockpit-files:...

RHEL 10 : cockpit-files (RHSA-2026:95570)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:95570 advisory. A filesystem browser for Cockpit Security Fixes: cockpit-files: cockpit-files: Arbitrary file ownership and permission modification via...

Moderate: Red Hat Security Advisory: cockpit-files security update

An update for cockpit-files is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

ALSA-2026:95570 Moderate: cockpit-files security update

A filesystem browser for Cockpit Security Fixes: cockpit-files: cockpit-files: Arbitrary file ownership and permission modification via symlink race condition CVE-2026-91203 cockpit-files: cockpit-files: Arbitrary file ownership change via symlink following in privileged paste CVE-2026-91202...

Security Bulletin: Nomad allocation data migration may allow host directory permission modification via symlink following

Summary HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during same-client allocation data migration that may allow a malicious workload to change permissions and ownership of host directories. This could allow unauthorized access to host data or modification of host file...

CVE-2026-119168 Nomad allocation data migration may allow host directory permission modification via symlink following

HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during same-client allocation data migration that may allow a malicious workload to change permissions and ownership of host directories. This could allow unauthorized access to host data or modification of host files,...

CVE-2026-119168 Nomad allocation data migration may allow host directory permission modification via symlink following

HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during same-client allocation data migration that may allow a malicious workload to change permissions and ownership of host directories. This could allow unauthorized access to host data or modification of host files,...

CVE-2026-119168 Nomad allocation data migration may allow host directory permission modification via symlink following

HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during same-client allocation data migration that may allow a malicious workload to change permissions and ownership of host directories. This could allow unauthorized access to host data or modification of host files,...

Nomad allocation data migration may allow host directory permission modification via symlink following

Summary HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during same-client allocation data migration that may allow a malicious workload to change permissions and ownership of host directories. This could allow unauthorized access to host data or modification of host file...

Python < 3.10.22 / 3.11.x < 3.11.17 / 3.12.x < 3.12.15 / 3.13.x < 3.13.16 / 3.14.x < 3.14.0b1 Link Following

The version of Python installed on the remote Windows host is prior to 3.10.22, or is 3.11.x prior to 3.11.17, or 3.12.x prior to 3.12.15, or 3.13.x prior to 3.13.16, or 3.14.x prior to 3.14.0b1. It is, therefore, affected by a link following vulnerability. In CPython 3.13 and earlier, the tarfil...

Unity Linux 20.1070a Security Update: python3.11 (UTSA-2026-141789)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-141789 advisory. An issue was found in the CPython tempfile.TemporaryDirectory class affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior. The...

Astra Linux – vulnerability in rustc, rustc-1.80

Tar-rs is a tar archive reading/writing library for Rust. In versions 0.4.44 and earlier, when unpacking a tar archive, the tar crate’s unpackdir function uses fs::metadata to determine whether a path that already exists is a directory. Since fs::metadata follows symbolic links, a specially craft...