EUVD-2026-60104

opensslencrypt versions before 1.4.0 contain a logging bug in restorehiddenmodules that logs module counts after clearing, always showing zero restored modules and corrupting audit trails. Additionally, a race condition exists between module hiding and import hook installation where another threa...

CVE-2026-74885

The Python package openssl_encrypt before 1.4.0 has a logging bug in restore_hidden_modules() that always reports zero restored modules, corrupting audit trails, and a race condition allowing blocked modules to be re-imported in multi-threaded environments. CVSS 4.0 scores it 9.3 CRITICAL (networ...

BIT-OPENBAO-2026-46358 OpenBao's Inline Auth Incorrectly Redacted Headers

OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, OpenBao's inline auth functionality incorrectly redacted audit log entries, resulting in non-auth headers being removed and auth-related headers being retained in cleartext. This requires an attacker to...

BIT-AIRFLOW-2026-68969 Apache Airflow: Bulk Variable and Connection endpoints record secret values in the audit log in cleartext

Apache Airflow wrote Variable values and Connection extra contents to the audit log in cleartext when they were submitted through the bulk endpoints PATCH /api/v2/variables and PATCH /api/v2/connections. The audit-log masking recognised only top-level request fields, and a bulk request nests its...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099694)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099694 advisory. In the Linux kernel, the following vulnerability has been resolved: audit: Fix data races of skbqueuelen readers on auditqueue Multiple readers access auditqueue.qle...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100534)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100534 advisory. In the Linux kernel, the following vulnerability has been resolved: audit: Fix data races of skbqueuelen readers on auditqueue Multiple readers access auditqueue.qle...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099930)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099930 advisory. In the Linux kernel, the following vulnerability has been resolved: audit: fix incorrect inheritable capability in CAPSET records auditlogcapset records the effectiv...

MINI-4CVX-M8J4-63CX

Bulletin has no description...

MINI-F5W8-2VMC-53H8

Bulletin has no description...

MINI-8PMC-WG5W-Q8MG

Bulletin has no description...

cargo-audit-0.22.2~git0.281452c-2.1 on GA media (moderate)

cargo-audit-0.22.2git0.281452c-2.1 on GA media Announcement ID: openSUSE-SU-2026:11512-1 Rating: moderate Cross-References: CVE-2026-25541 CVSS scores: CVE-2026-25541 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-25541 SUSE : 8.7...

SUSE CVE-2026-74512

In the Linux kernel, the following vulnerability has been resolved: audit: fix potential use-after-free in auditdelrule auditdelrule destroys e-rule.exe via auditremovemarkrule before unlinking the rule from RCU-visible filter lists and waiting for a grace period. Concurrent readers in auditfilte...

MINI-Q72X-889G-VHH4

Bulletin has no description...

MINI-5463-XG23-5JPF

Bulletin has no description...

MINI-3HF5-6J5R-HJXF

Bulletin has no description...

CVE-2026-74512

In the Linux kernel, the following vulnerability has been resolved: audit: fix potential use-after-free in auditdelrule auditdelrule destroys e-rule.exe via auditremovemarkrule before unlinking the rule from RCU-visible filter lists and waiting for a grace period. Concurrent readers in auditfilte...

AZL-96540 CVE-2026-74512 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: audit: fix potential use-after-free in auditdelrule auditdelrule destroys e-rule.exe via auditremovemarkrule before unlinking the rule from RCU-visible filter lists and waiting for a grace period. Concurrent readers in auditfilte...

CVE-2026-74512

In the Linux kernel, the following vulnerability has been resolved: audit: fix potential use-after-free in auditdelrule auditdelrule destroys e-rule.exe via auditremovemarkrule before unlinking the rule from RCU-visible filter lists and waiting for a grace period. Concurrent readers in auditfilte...

UBUNTU-CVE-2026-74512

In the Linux kernel, the following vulnerability has been resolved: audit: fix potential use-after-free in auditdelrule auditdelrule destroys e-rule.exe via auditremovemarkrule before unlinking the rule from RCU-visible filter lists and waiting for a grace period. Concurrent readers in auditfilte...

EUVD-2026-59705

In the Linux kernel, the following vulnerability has been resolved: audit: fix potential use-after-free in auditdelrule auditdelrule destroys e-rule.exe via auditremovemarkrule before unlinking the rule from RCU-visible filter lists and waiting for a grace period. Concurrent readers in auditfilte...