137127 matches found
CLSA-2026-1787564106 TuxCare security update for 38 packages (1 CVE)
TuxCare rebuilt 38 packages to address 1 CVE. Fixed in 9.0.50-tuxcare.15...
CLSA-2026-1787561993 TuxCare security update for debug (1 CVE)
TuxCare rebuilt debug to address 1 CVE. Fixed in 1.0.2-tuxcare.2...
CLSA-2026-1787559705 TuxCare security update for setuptools (1 CVE)
TuxCare rebuilt setuptools to address 1 CVE. Fixed in 75.3.2.post1+tuxcare...
CLSA-2026-1787551818 TuxCare security update for requests (1 CVE)
TuxCare rebuilt requests to address 1 CVE. Fixed in 2.25.1.post2+tuxcare...
CLSA-2026-1787550865 TuxCare security update for 55 packages (1 CVE)
TuxCare rebuilt 55 packages to address 1 CVE. Fixed in 7.6.0.v20120127-tuxcare.3...
CLSA-2026-1787546974 TuxCare security update for log4j:log4j (1 CVE)
TuxCare rebuilt log4j:log4j to address 1 CVE. Fixed in 1.2.14-tuxcare.1...
SUSE-RU-2026:3712-1 Security update 5.1.5 for Multi-Linux Manager Server
This update fixes the following issues: Release Notes Highlights: - Update to SUSE Multi-Linux Manager 5.1.5 Added known issue for missing BasicConstraints Critical flag Added a note about disk-check parameters semantics change Added a note about enabling FIPS mode after installing SUSE Multi-Lin...
CSV Injection
Overview exceljs is a package to Read, manipulate and write spreadsheet data and styles to XLSX and JSON. Affected versions of this package are vulnerable to CSV Injection through the CSV.write process in lib/csv/csv.js. An attacker can trigger spreadsheet formula execution by supplying a cell...
CVE-2026-78205
BentoML's outbound connection safeguard makesafeconnect in internal/utils/uri.py blocks private, loopback, and link-local IP addresses but fails to reject the RFC 6598 shared address space 100.64.0.0/10, CGNAT. In versions 1.4.19 through 1.4.39, an unauthenticated attacker can supply URLs pointin...
EUVD-2026-64680
BentoML's outbound connection safeguard makesafeconnect in internal/utils/uri.py blocks private, loopback, and link-local IP addresses but fails to reject the RFC 6598 shared address space 100.64.0.0/10, CGNAT. In versions 1.4.19 through 1.4.39, an unauthenticated attacker can supply URLs pointin...
CVE-2026-78205 BentoML 1.4.19 through 1.4.39 Server-Side Request Forgery via Unfiltered RFC 6598 Shared Address Space
BentoML's outbound connection safeguard makesafeconnect in internal/utils/uri.py blocks private, loopback, and link-local IP addresses but fails to reject the RFC 6598 shared address space 100.64.0.0/10, CGNAT. In versions 1.4.19 through 1.4.39, an unauthenticated attacker can supply URLs pointin...
NetworkManager security update
1.54.3-5.0.1 - Introduce always-ignore-carrier setting Orabug: 39663315 - disable MPTCP handling by default Orabug: 34801142 - add connectivity check via Oracle servers Orabug: 32051972 - Add a dropin file to make Networkmanager-dispatcher persistent Orabug: 36989910 - Drop 777 permissions from t...
OPENSUSE-SU-2026:11586-1 python313-msgpack-1.2.1-1.1 on GA media
These are all security issues fixed in the python313-msgpack-1.2.1-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-80914
Name of the Vulnerable Software and Affected Versions NetworkManager affected versions not specified Description NetworkManager failed to apply the private user restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This allows an unprivileged local user to...
OPENSUSE-SU-2026:11585-1 python313-mistune-3.3.4-1.1 on GA media
These are all security issues fixed in the python313-mistune-3.3.4-1.1 package on the GA media of openSUSE Tumbleweed...
grafana security, bug fix, and enhancement update
10.2.6-23 - Resolves RHEL-183803: CVE-2026-39821 - Resolves RHEL-188280...
OPENSUSE-SU-2026:11588-1 python313-pypdf-6.16.2-1.1 on GA media
These are all security issues fixed in the python313-pypdf-6.16.2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11584-1 expat-2.8.2-1.1 on GA media
These are all security issues fixed in the expat-2.8.2-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-79798
BentoML's outbound connection safeguard make safe connect in internal/utils/uri.py blocks private, loopback, and link-local IP addresses but fails to reject the RFC 6598 shared address space 100.64.0.0/10, CGNAT. In versions 1.4.19 through 1.4.39, an unauthenticated attacker can supply URLs...
