incus-os

はじめに IncusOS は、Incus を実行するためのイミュータブルOSイメージです。 Debian 13 をベースにしており、mkosi を使用して構築されています。 IncusOS は、最新の amd64 x8664 および arm64 システムにインストールできます。 これは、Incus サーバーを非常に高速かつ安全で信頼性の高い方法で実行することを目的としています。 セキュリティに重点を置いており、ブートセキュリティとディスク暗号化のために UEFI Secure Boot と TPM 2.0 を積極的に利用しています。 IncusOS の使い方については、 こちら...

ROOT-APP-NPM-CVE-2026-59880 CVE-2026-59880 in immutable - Patched by Root

Root has patched CVE-2026-59880 in the immutable package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-29063 CVE-2026-29063 in immutable - Patched by Root

Root has patched CVE-2026-29063 in the immutable package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-281048 AIKIDO-2026-281048 in immutable - Patched by Root

Root has patched AIKIDO-2026-281048 in the immutable package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-428611 AIKIDO-2026-428611 in immutable - Patched by Root

Root has patched AIKIDO-2026-428611 in the immutable package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-59879 CVE-2026-59879 in immutable - Patched by Root

Root has patched CVE-2026-59879 in the immutable package for Root:npm. Multiple fixed versions available...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.50 security and extras update

Red Hat OpenShift Container Platform release 4.19.50 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a security impact of...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.36 security and extras update

Red Hat OpenShift Container Platform release 4.21.36 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a security impact of...

CVE-2025-27893

CVE-2025-27893: Archer Platformにおける想定不変Webパラメータの外部制御 説明 Archer Platform 6から6.14.00202.10024において、レコード作成権限を持つ認証ユーザーは、GenericContent/Record.aspx?id= URIを介してCopyリクエストを傍受・改変することで、作成日などの不変フィールドを操作できます。これにより、システム生成メタデータの不正な改変が可能となり、データの整合性が損なわれ、監査、コンプライアンス、セキュリティ統制に影響を及ぼす可能性があります。 影響を受ける製品 ベンダー :...

Security Bulletin: Vulnerability in immutable bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging.

Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging include the immutable library, which is affected by a denial of service vulnerability. CVE-2026-59879, CVE-2026-59880. Vulnerability Details CVEID:CVE-2026-59879 DESCRIPTION: Immutable.js provides many Persistent Immutable data...

CLSA-2026-1790866103 TuxCare security update for immutable (1 CVE)

TuxCare rebuilt immutable to address 1 CVE. Fixed in 3.7.6-tuxcare.2...

CLSA-2026-1790808099 TuxCare security update for immutable (2 CVEs)

TuxCare rebuilt immutable to address 2 CVEs. Fixed in 3.7.6-tuxcare.1...

Security Bulletin: Vulnerabilities in netty-codec, spring-webflux, spring-data, Spring MVC, Immutable and ACE might affect IBM Storage Defender Copy Data Management

Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in netty-codec, spring-webflux, spring-data, Spring MVC, Immutable and ACE. Vulnerabilities include Netty can cause native memory exhaustion, An attacker can bypass the short-circuit mechanism by sending a reques...

CLEANSTART-2026-BI32681 Immutable

Security vulnerability affects the argo-workflows package. Immutable...

CLEANSTART-2026-BB25914 Immutable

Security vulnerability affects the argo-workflows package. Immutable...

CLSA-2026-1790084679 TuxCare security update for immutable (2 CVEs)

TuxCare rebuilt immutable to address 2 CVEs. Fixed in 5.1.5-tuxcare.1...

PT-2026-105332

TuxCare rebuilt immutable to address 2 CVEs. Fixed in 5.1.5-tuxcare.1...

Modification of Assumed-Immutable Data (MAID)

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Modification of Assumed-Immutable Data MAID in the Object.getOwnPropertyDescriptor or lookupSetter process. An attacker can modify properties that we...

polaris v10.2.3

Polaris is an open source policy engine for Kubernetes Polaris is an open source policy engine for Kubernetes that validates and remediates resource configuration. It includes 30+ built in configuration policies, as well as the ability to build custom policies with JSON Schema. When run on the...

Astra Linux – Vulnerability in python-cryptography

Cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions, Cipher.updateinto would accept Python objects that implement the buffer protocol, but only provide immutable buffers. This would allow immutable objects such as bytes to b...