PT-2026-47087

Summary Type: Insecure Direct Object Reference. The agent CRUD endpoints GET / PATCH / DELETE /workspaces/workspace id/agents/agent id gate access on require workspace memberworkspace id only, then resolve agent id through AgentService.getagent id which is a primary-key lookup with no workspace...

kernel security update

4.18.0-553.129.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

CVE-2026-48156

A flaw was found in pypdf, a free and open-source pure-python PDF library. A remote attacker could exploit this vulnerability by crafting a malicious PDF file. This file, containing specific cross-reference streams with /W 0 0 0 values and large /Size values, can lead to excessively long processi...

MINI-F33Q-4M75-M8P4

Bulletin has no description...

MINI-94V4-34MJ-586V

Bulletin has no description...

MINI-P886-399J-3GFV

Bulletin has no description...

MINI-89R2-VH9Q-F88G

Bulletin has no description...

MINI-H8R4-5436-G3F4

Bulletin has no description...

MINI-G2CG-JXGF-9J2Q

Bulletin has no description...

MINI-W5JH-H6QX-M6W8

Bulletin has no description...

MINI-MF3C-35J4-7XW4

Bulletin has no description...

MINI-F84P-CQH6-2GCJ

Bulletin has no description...

MINI-XWHF-5MX6-66RJ

Bulletin has no description...

MINI-6MF9-X2G4-96G7

Bulletin has no description...

MINI-QGXF-68MP-J2G6

Bulletin has no description...

MINI-FHV3-GV66-HRG3

Bulletin has no description...

MINI-X6VV-F86J-Q973

Bulletin has no description...

MINI-698V-HX2W-7H3H

Bulletin has no description...

MINI-2624-X379-GH8H

Bulletin has no description...

kas's late signature validation may allow unnoticed repository manipulations

Impact So far, kas checks out and processes repositories regarding configuration includes prior to validating signatures of those repositories. This may allow to replace on original repository with one under the control of an attacker under very specific conditions. First of all, the attacker mus...