CVE-2026-53454 Blueprint Studio stored Git credentials in plaintext Git credential store

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio configured Git's credential.helper store when saving Git credentials, causing Git credential-store to persist usernames and access tokens in plaintext in the .git-credentials fi...

EUVD-2026-61485

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio configured Git's credential.helper store when saving Git credentials, causing Git credential-store to persist usernames and access tokens in plaintext in the .git-credentials fi...

CVE-2026-53458

Blueprint Studio (a Home Assistant configuration editor add-on) prior to v2.5.2 returned raw exception strings from backend API handlers in custom_components/blueprint_studio/backend/api.py to authenticated users, exposing internal filesystem paths and implementation details that could aid finger...

CVE-2026-17106

The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers do not confine filesystem operations to the destination directory. The extractor decides where each archive entry lands using lexical string checks and then performs the...

USN-8646-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - OCFS2 file system; - B.A.T.M.A.N. meshing protocol; - Netfilter; - SCTP protocol; CVE-2026-52914, CVE-2026-53002,...

USN-8646-1 linux vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - OCFS2 file system; - B.A.T.M.A.N. meshing protocol; - Netfilter; - SCTP protocol; CVE-2026-52914, CVE-2026-53002,...

USN-8644-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - File systems infrastructure; - OCFS2 file system; - B.A.T.M.A.N. meshing protocol; - SCTP protocol; - TIPC protocol...

CVE-2026-72159

A flaw was found in the OCFS2 file system within the Linux kernel. This vulnerability occurs when processing specially crafted file system metadata, specifically non-inline dinodes that report a non-zero file size but zero allocated clusters. An attacker could potentially create a malformed file...

CVE-2026-72186

A flaw was found in the Linux kernel's NTFS driver. A local user could exploit this by writing to specific system files, such as $Bitmap, which are exposed through the showsysfiles interface. This unauthorized write access can lead to file system corruption and potentially cause a system deadlock...

CVE-2026-72170

A flaw was found in the Linux kernel's 9p filesystem. A race condition can occur during file unlinking operations in cacheless mode, where the v9fsdeccount function attempts to decrement a file's link count nlink that has already reached zero. This leads to a kernel warning, which could potential...

CVE-2026-72203

A flaw was found in the Linux kernel. This flaw involves a deadlock condition within the NTFS file system's writeback mechanism. Specifically, an ABBA deadlock can occur between the extentlock and mreclock during inode and MFT Master File Table folio writeback operations. This could lead to a...

CVE-2026-72185

A flaw was found in the Linux kernel's NTFS filesystem driver. A specially crafted NTFS image could cause the system to incorrectly process attribute data during mounting. This could lead to a kernel warning and corruption of internal data structures, potentially resulting in system instability o...

Linux Distros Unpatched Vulnerability : CVE-2026-72477

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/ntfs3: call ntfsbadinode when failing to rename It is safe to call ntfsbadinode on live inodes since: commit 519b078998ce fs/ntfs3: Exclude call makebadinode...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101961)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101961 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: only release the dirty pages io tree after successful writes WARNING With extra warning o...

Linux Distros Unpatched Vulnerability : CVE-2026-72378

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - afs: Fix error code in afsextractvladdrs The error codes on these paths are only set on the first iteration through the loop. Set the correct error code on ever...

Linux Distros Unpatched Vulnerability : CVE-2026-72160

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: reject dinodes with non-canonical imode type Patch series ocfs2: harden inode validators against forged metadata, v2. This series adds three structural...

Linux Distros Unpatched Vulnerability : CVE-2026-72372

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - afs: Fix lack of locking around modifications of net-cellsdynino Fix the lack of locking around modifications of net-cellsdynino by taking net-cellslock...

Linux Distros Unpatched Vulnerability : CVE-2026-74426

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - afs: fix NULL pointer dereference in afsgettree afsallocsbi uses kzalloc for memory allocation. And, if ctx-dynroot is not null, as-cell and as-volume are null...

Linux Distros Unpatched Vulnerability : CVE-2026-74362

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext2: fix ignored return value of genericwritesync Fix ext2diowriteiter to propagate the error returned by genericwritesync instead of silently discarding it,...

Linux Distros Unpatched Vulnerability : CVE-2026-74358

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: fix fast commit wait/wake bit mapping on 64-bit On 64-bit, ext4 dynamic inode states live in the upper half of iflags, and ext4testinodestate applies the...