266880 matches found
GHSA-V74W-7MR3-4QG3 vulnerabilities
Vulnerabilities for packages: thingsboard, apache-hop, tinkerpop, seata, apache-hop-fips, tez, hadoop-fips, management-api-for-apache-cassandra-5.0...
GHSA-FJR4-X663-MWXC vulnerabilities
Vulnerabilities for packages: jupyter-all-spark-notebook, opal, mlflow, mlflow-fips, datahub-ingestion, datahub-ingestion-fips, awx...
GHSA-6P8H-3WGX-97GF vulnerabilities
Vulnerabilities for packages: jupyter-all-spark-notebook, opal, mlflow, mlflow-fips, datahub-ingestion, datahub-ingestion-fips, awx...
GHSA-3RP5-JJMW-4WV2 vulnerabilities
Vulnerabilities for packages: jupyter-all-spark-notebook, opal, mlflow, mlflow-fips, datahub-ingestion, datahub-ingestion-fips, awx...
GHSA-R9MR-M37C-5FR3 vulnerabilities
Vulnerabilities for packages: jupyter-all-spark-notebook, opal, mlflow, mlflow-fips, datahub-ingestion, datahub-ingestion-fips, awx...
CVE-2026-57497 vulnerabilities
Vulnerabilities for packages: k3s, ipfs-cluster-fips, kubo, spegel-fips, rke2-runtime-fips, ipfs-cluster, spegel, rke2-runtime...
GHSA-R292-9MHP-454M vulnerabilities
Vulnerabilities for packages: npm, prism, kubeflow-centraldashboard, renovate, saf, node-gyp, code-server, pulumi, opensearch-dashboards, lerna, sqlpad...
GHSA-R277-6W6Q-XMQW vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-dynamodb, crossplane-provider-family-aws, crossplane-provider-aws-cloudfront, crossplane-provider-aws-memorydb, gitness, crossplane-provider-aws-s3, crossplane-provider-azure-storage, crossplane-provider-aws-eks, grafana,...
Updated wget packages fix security vulnerabilities
Updated wget packages fix security vulnerabilities: -CVE-2026-58469 Wget incorrectly handled Metalink documents containing a whitespace-only URL. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Mageia 9 and Mageia 10. -CVE-2026-58470 : Wget...
DEBIAN-CVE-2026-64509
In the Linux kernel, the following vulnerability has been resolved: rust: block: fix GenDisk cleanup paths GenDiskBuilder::build still has fallible work after blkmqallocdisk, but its error path only recovers the foreign queue data. That leaks the temporary gendisk and requestqueue until later...
DEBIAN-CVE-2026-64429
In the Linux kernel, the following vulnerability has been resolved: gpio: eic-sprd: use rawspinlockt in the irq startup path sprdeicirqunmask enables the GPIO IRQ and then updates controller state through sprdeicupdate, which takes sprdeic-lock with spinlockirqsave. The callback can be reached fr...
DEBIAN-CVE-2026-64326
In the Linux kernel, the following vulnerability has been resolved: block: skip syncblockdev on surprise removal in bdevmarkdead bdevmarkdead's @surprise == true means the device is already gone. The filesystem callback fsbdevmarkdead honours this and skips syncfilesystem, but the bare block devi...
DEBIAN-CVE-2026-64330
In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: Validate SVID index in svdmconsumemodes In svdmconsumemodes, the SVID value is read from pmdata-svids using pmdata-svidindex as an array index without bounds validation: paltmode-svid =...
DEBIAN-CVE-2026-64323
In the Linux kernel, the following vulnerability has been resolved: udf: validate VAT header length against the VAT inode size udfloadvat takes the virtual partition's start offset straight from the on-disk VAT 2.0 header without checking it against the VAT inode size:...
CVE-2026-64321
In the Linux kernel, the following vulnerability has been resolved: nvme: target: rdma: fix ndev refcount leak on queue connect nvmetrdmaqueueconnect calls nvmetrdmafindgetdevice which acquires a reference on the returned ndev via krefget. On the path where the host queue backlog is exceeded and...
EUVD-2026-49023
In the Linux kernel, the following vulnerability has been resolved: crypto: loongson - Remove broken and unused loongson-rng The loongson-rng rngalg has several vulnerabilities, including not providing forward security, and a use-after-free bug due to the use of waitforcompletioninterruptible...
kernel: Fix of 43 CVEs
Bluetooth: hcisysfs: Fix attempting to call deviceadd multiple times CVE-2022-50419 - firewire: net: fix use after free in fwnetfinishincomingpacket CVE-2023-53432 - wifi: brcmfmac: fix use-after-free bug in brcmfnetdevstartxmit CVE-2022-50408 - wifi: brcmfmac: slab-out-of-bounds read in...
CVE-2026-56817 vulnerabilities
Vulnerabilities for packages: celeborn, tez, management-api-for-apache-cassandra-5.0, thingsboard...