PT-2026-59834

Impact An input token that is not a UTF-8 bytestring will trigger a CHECK fail in tf.raw ops.PyFunc. python import tensorflow as tf value = tf.constantvalue=1,2 token = b'xb0' dataType = tf.int32 tf.raw ops.PyFuncinput=value,token=token,Tout=dataType Patches We have patched the issue in GitHub...

PT-2026-59903

Impact When running on GPU, tf.image.generate bounding box proposals receives a scores input that must be of rank 4 but is not checked. python import tensorflow as tf a = tf.constantvalue=1.0, 1.0, 1.0, 1.0, 1.0, 1.0, 1.0, 1.0 b = tf.constantvalue=1 tf.image.generate bounding box...

PT-2026-59982

Impact An input encoded that is not a valid CompositeTensorVariant tensor will trigger a segfault in tf.raw ops.CompositeTensorVariantToComponents. python import tensorflow as tf encode = tf.raw ops.EmptyTensorListelement dtype=tf.int32, element shape=10, 15, max num elements=2 meta= ""...

GnuTLS Hostname Verification

The vulnerability of the gnutlsx509crtcheckhostname2 function in the lib/x509/hostname-verify.c file at line 111,245-265 of the GnuTLS cryptographic library is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker to replace the server and...

aiohttp Request.post() DoS

The vulnerability of the Request.post function in the aiohttp HTTP client is related to unlimited resource distribution or throttling. Exploiting this vulnerability could allow a remote attacker to cause service failures...

block blk-sysfs Queueattrstore DoS

The vulnerability of the queueattrstore function in the block/blk-sysfs.c module, which supports the block-level kernel in the Linux operating system, is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a attacker to cause service failures...

RHEL 9 : freeipmi (RHSA-2026:39006)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:39006 advisory. The freeipmi packages contain an Intelligent Platform Management Interface IPMI remote console and system management software based on the...

Security update for dash (moderate)

openSUSE security update: security update for dash ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21301-1 Rating: moderate References: bsc1178978 bsc1269494 Cross-References: CVE-2026-31323 CVSS scores: CVE-2026-31323 SUSE : 4...

Important: maven:3.9 security update

Maven is a software project management and comprehension tool. Based on the concept of a project object model POM, Maven can manage a project's build, reporting and documentation from a central piece of information. Security Fixes: org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Travers...

AlmaLinux 9 : podman (ALSA-2026:37123)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:37123 advisory. golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate CVE-2026-39835 golang.org/x/crypto/ssh:...

RHEL 9 : compat-openssl11 (RHSA-2026:39012)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:39012 advisory. The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the librarie...

BIT-NEXTCLOUD-2021-32658 Sensitive data may not be removed from storage on account removal

Nextcloud Android is the Android client for the Nextcloud open source home cloud system. Due to a timeout issue the Android client may not properly clean all sensitive data on account removal. This could include sensitive key material such as the End-to-End encryption keys. It is recommended that...

CVE-2026-20244 affecting package clamav for versions less than 1.5.3-1

CVE-2026-20244 affecting package clamav for versions less than 1.5.3-1. An upgraded version of the package is available that resolves this issue...

MINI-4VPW-5GX4-R3V6

Bulletin has no description...

MINI-377R-HGW6-767C

Bulletin has no description...

MINI-H4QV-QFQ4-FJ69

Bulletin has no description...

MINI-HMC6-6XJC-CM4C

Bulletin has no description...

Chromium: CVE-2026-14096 Object lifecycle issue in Input

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-13939 Insufficient validation of untrusted input in WebShare

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-13924 Insufficient validation of untrusted input in WebView

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...