UBUNTU-CVE-2026-46595

Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped...

UBUNTU-CVE-2026-39831

The Verify method for FIDO/U2F security key types [email protected], [email protected] did not check the User Presence flag. Signatures generated without physical touch were accepted, allowing unattended use of a hardware security key. To restore the previous behavior,...

UBUNTU-CVE-2026-42001

Insufficient Validation of Autoprimary SOA Queries...

UBUNTU-CVE-2026-44073

Authentication modules in Netatalk 1.5.0 through 4.4.2 fail to check the return value of seteuid, which may allow a remote authenticated attacker to retain elevated privileges under error conditions...

UBUNTU-CVE-2026-44051

An improper link resolution vulnerability in Netatalk 3.0.2 through 4.4.2 allows a remote authenticated attacker to read arbitrary files or overwrite arbitrary files via attacker-controlled symlink creation...

UBUNTU-CVE-2026-44067

A heap over-read in extended attribute EA header parsing in Netatalk 2.1.0 through 4.4.2 allows a remote authenticated attacker to obtain limited information or cause a minor service disruption via crafted EA data...

UBUNTU-CVE-2026-44053

Netatalk 1.5.0 through 4.2.2 uses a broken cryptographic algorithm in the DHCAST128 UAM, which allows a remote attacker to obtain authentication credentials or impersonate a user via cryptanalytic attack...

BELL-CVE-2026-43381

Bulletin has no description...

BELL-CVE-2026-43343

Bulletin has no description...

BELL-CVE-2026-43320

Bulletin has no description...

BELL-CVE-2026-43337

Bulletin has no description...

BELL-CVE-2026-43291

Bulletin has no description...

BELL-CVE-2026-3592

Bulletin has no description...

BELL-CVE-2026-29518

Bulletin has no description...

UBUNTU-CVE-2026-46626

Unknown description...

Arbitrary Command Injection

Overview Affected versions of this package are vulnerable to Arbitrary Command Injection via the ProxyCommand process. An attacker can execute arbitrary commands on the system by injecting malicious input into the SSH ProxyCommand configuration. Remediation Upgrade...

BELL-CVE-2026-41567

Bulletin has no description...

RHSA-2026:19034 Red Hat Security Advisory: python-tornado security update

Bulletin has no description...

Astra Linux - уязвимость в gnutls28

No description...

UBUNTU-CVE-2026-45232

Rsync versions before 3.4.3 contain an off-by-one out-of-bounds stack write vulnerability in the establishproxyconnection function in socket.c that allows network attackers to corrupt stack memory by sending a malformed HTTP proxy response. Attackers can exploit this by positioning themselves...