614 matches found
certified-unlearning-neural-networks-icml-2025
Certified Unlearning for Neural Networks This repository contains the implementation for the paper "Certified Unlearning for Neural Networks" ICML 2025. Methods PABI Privacy Amplification by Iteration : Gradient Clipping in the paper DP-SGD : With group privacy as described in the paper Contracti...
Security Bulletin: Security Vulnerabilities were found in IBM Semeru Runtime Certified Edition provided with IBM Verify Directory
Summary Security Vulnerabilities were addressed in IBM Semeru Runtime Certified Edition provided with IBM Verify Directory Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed...
Frappe CRM authorization issue vulnerability
Frappe CRM versions prior to 1.81.2 have an authorization issue vulnerability. This vulnerability stems from the lack of a permission hook, resulting in insufficient authorization checks. Certified Sales users can access the CRM notification records of other users. Attackers can query the...
Omnigent path traversal vulnerability
In versions prior to Omnigent 0.14.0 and 0.3.0, there was a path traversal vulnerability. This vulnerability stems from path traversal attacks. Certified users can escape the working directory by setting up nested sub-proxies in os.env.cwd. They can also upload bundles that utilize absolute or...
Security Bulletin: IBM App Connect Enterprise Certified Container operator and operands are vulnerable to loss of confidentiality and denial of service due to multiple CVEs
Summary IBM App Connect Enterprise Certified Container operator and operands are vulnerable to loss of confidentiality and denial of service due to multiple CVEs. This bulletin provides patch information to address the vulnerabilities Vulnerability Details CVEID:CVE-2026-84003 DESCRIPTION:...
Metasurface Quantum Graphs for Polarization-Independent Certified Randomness
Quantum random number generators are crucial for information security, yet existing implementations are hindered by bulky optics, device imperfections, and state alignment constraints. Here, using a compact metasurface platform, we achieve polarization-independent certified randomness by...
Constant-Rate Certified Deletion
We present a unified framework for upgrading a broad class of cryptographic primitives to support constant-rate certified deletion. Previous constructions require a linear number of qubits per encrypted bit of certified-deletable plaintext. In contrast, we obtain the first constant-rate...
Security Bulletin: Storage Virtualize Ansible Collection is VEX affected by a vulnerability in the crypography package
Summary Storage Virtualize Ansible Collection uses the cryptography package to establish secure communications with managed systems. Due to CVE-2026-34073, certificate validation performed by the cryptography package may incorrectly trust certificates in certain DNS name constraint scenarios...
Certified Randomness with Optimal Rate
The generation of certified random bits is an emerging near-term application of quantum computers. Potential applications, such as randomness beacons and CRS generation, require nearly uniform randomness, whose rate the ratio of min-entropy to bitlength is 1. However, existing protocols for...
Semi-Quantum Cryptography with Certified Deletion
Certified deletion allows a client to upload encrypted data to a server as a quantum state, then later request that the server delete their data and detect whether the server complies. If verification passes, then the data on the server will remain hidden even if the decryption key is later leake...
RHEL 10 : java-21-ibm-semeru-certified-jdk (RHSA-2026:72888)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:72888 advisory. The IBM Semeru Runtime Certified Edition 21 runtime environment. Security Fixes: OpenJDK: Improve Resource Resolving 2026-08 Security Upda...
Moderate: Red Hat Security Advisory: java-21-ibm-semeru-certified-jdk security update
An update for java-21-ibm-semeru-certified-jdk is now available for Red Hat Enterprise Linux 10.0 Extended Update Support and Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score,...
GHSA-VRF4-MX87-P53W libp2p: PeerStore accepts attacker-signed PeerRecords for a victim peer ID and stores certified attacker addresses
Summary @libp2p/peer-store accepts a signed PeerRecord whose envelope is signed by one peer but whose payload claims a different peer ID. The vulnerable consumePeerRecord path verifies the envelope signature, but does not verify that the envelope signer is the same peer as the wrapped...
libp2p: PeerStore accepts attacker-signed PeerRecords for a victim peer ID and stores certified attacker addresses
Summary @libp2p/peer-store accepts a signed PeerRecord whose envelope is signed by one peer but whose payload claims a different peer ID. The vulnerable consumePeerRecord path verifies the envelope signature, but does not verify that the envelope signer is the same peer as the wrapped...
Towards TEE-Certified DP: Verifiable Differentially Private Training on Legacy GPUs
Wide adoption of machine learning has created growing policy and regulatory demand for protecting sensitive training data, with differential privacy DP emerging as a key mechanism. Yet a less-studied problem is how to certify the faithful execution of DP during training: an external verifier shou...
Security Bulletin: IBM App Connect Enterprise Certified Container operator and operands are vulnerable to loss of confidentiality and denial of service due to multiple CVEs
Summary IBM App Connect Enterprise Certified Container operator and operands are vulnerable to loss of confidentiality and denial of service due to multiple CVEs. This bulletin provides patch information to address the vulnerabilities Vulnerability Details CVEID:CVE-2026-54512 DESCRIPTION:...
CVE-2026-18622 Foxit PDF Editor/Reader's signature-validation pop-up reports modified certified documents as valid
Foxit PDF Editor/Reader inconsistently alerts users when signature fields are abnormally modified, including alterations to appearance, coordinates, or field duplication. This may mislead users into trusting tampered documents, since the UI cannot accurately reflect the actual integrity status of...
CVE-2026-18622 Foxit PDF Editor/Reader's signature-validation pop-up reports modified certified documents as valid
Foxit PDF Editor/Reader inconsistently alerts users when signature fields are abnormally modified, including alterations to appearance, coordinates, or field duplication. This may mislead users into trusting tampered documents, since the UI cannot accurately reflect the actual integrity status of...
