Security Bulletin: Vulnerabilities in Apache Tomcat affect IBM SAN Volume Controller, IBM Storwize, IBM Storage Virtualize and IBM FlashSystem products

Summary Vulnerabilities in Apache Tomcat affect the product's management GUI could cause confidentiality, integrity and availability impacts. The CLI is unaffected. CVE-2025-48976 CVE-2025-48988 CVE-2025-49125 CVE-2025-53506 CVE-2025-52434 CVE-2025-55752 CVE-2025-61795. Vulnerability Details...

Security Bulletin: Vulnerabilities in multiple components affect IBM SAN Volume Controller, IBM Spectrum Virtualize and IBM FlashSystem products

Summary Vulnerabilities in openssh, libssh, kernel and gnutls components affect IBM Storage Virtualize products and could cause confidentiality, integrity and availability impacts. CVE-2026-35387 CVE-2026-35414 CVE-2025-5372 CVE-2022-50865 CVE-2025-39971 CVE-2025-14831. Vulnerability Details...

Important: Red Hat Security Advisory: Multicluster Global Hub 1.5.6 security update

Multicluster Global Hub v1.5.6 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...

SUSE CVE-2026-64123

In the Linux kernel, the following vulnerability has been resolved: net: hsr: defer node table free until after RCU readers HSR node-list and node-status generic-netlink operations run under rcureadlock. They walk hsr-nodedb through hsrgetnextnode and hsrgetnodedata, but RTMDELLINK teardown remov...

PT-2026-62330

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle...

PT-2026-63100

Name of the Vulnerable Software and Affected Versions Oracle Communications Converged Application Server version 8.3 Description A flaw exists in the RTP Proxy component of the Oracle Communications Converged Application Server. A high-privileged attacker with access to the infrastructure where t...

PT-2026-63453

These are all security issues fixed in the python313-bleach-6.4.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-64436

Name of the Vulnerable Software and Affected Versions libsrt versions prior to 1.5.6-1.1 Description An issue exists involving an encryption state machine downgrade. Recommendations Update to version 1.5.6-1.1...

OPENSUSE-SU-2026:11319-1 7zip-26.02-1.1 on GA media

These are all security issues fixed in the 7zip-26.02-1.1 package on the GA media of openSUSE Tumbleweed...

Linux Distros Unpatched Vulnerability : CVE-2026-15811

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in kronosnet's version =1.34 cryptographic configuration management. The framework does not correctly zero-out or wipe sensitive memor...

OPENSUSE-SU-2026:11323-1 python313-bleach-6.4.0-1.1 on GA media

These are all security issues fixed in the python313-bleach-6.4.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-62224

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.4.0 through 8.4.10 MySQL Server versions 9.7.0 through 9.7.1 MySQL Cluster versions 8.0.0 through 8.0.47 MySQL Cluster versions 8.4.0 through 8.4.10 MySQL Cluster versions 9.7.0 through 9.7.1 Description A flaw in the...

PT-2026-63492

Name of the Vulnerable Software and Affected Versions MPG WordPress plugin versions prior to 4.1.8 Description An issue exists where the software fails to sanitize and escape parameters before reflecting them in the response. This allows an unauthenticated attacker to execute reflected cross-site...

PT-2026-63314

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description An authenticated user with package publishing permissions can cause resource amplification by uploading a specially crafted Arch package archive. The system records non-dot regular file entries...

OPENSUSE-SU-2026:11320-1 libntfs-3g-devel-2022.10.3-8.1 on GA media

These are all security issues fixed in the libntfs-3g-devel-2022.10.3-8.1 package on the GA media of openSUSE Tumbleweed...

MediaInfoLib File Parse Data Compromise

The vulnerability of the MediaInfoLib::FileOgg::DataParse function in the MediaInfoLib/Source/MediaInfo/FileAnalyze.cpp library, which is used to process Ogg-formatted files, is related to buffer overflows in dynamic memory during the processing of specially crafted Ogg files. Exploitation of thi...

Mellanox Ethernet driver Heap Buffer Overflow

The vulnerability of the mlx5irqalloc function in the drivers/net/ethernet/mellanox/mlx5/core/pciirq.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to the distribution of resources without any restrictions or regulation. Exploiting this...

Linux PCI Endpoint Test Function Use-After-Free

The vulnerability of the pciendpointtestmsiirq function in the drivers/misc/pciendpointtest.c module of the Linux kernel is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...

ZenLib BitStream_LE Get Function

The vulnerability of the ZenLib::BitStreamLE::Get function in the ZenLib/Source/ZenLib/BitStreamLE.h header file of the MediaInfo reading library is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

Linux kernel GPIO driver Heap Buffer Overflow DoS

The vulnerability of the lineinfochangednotify function in the drivers/gpio/gpiolib-cdev.c driver for the Linux kernel’s GPIO driver is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...