CGA-MF45-RCHG-PQ3P

Bulletin has no description...

Security Bulletin: TS4500 CLI tool addresses security vulnerability CVE-2026-16107

Summary The TS4500 CLI tool used an insecure SSL configuration that did not properly validate server certificates, potentially allowing attackers to intercept communications through a Man-in-the-Middle MitM attack. The issue has been resolved by enforcing proper SSL certificate validation during...

DEBIAN-CVE-2026-16493

A flaw was found in ansible-core. The extractcollectionfromgit function in ansible-core's concreteartifactmanager.py constructs git clone commands without a '--' end-of-options separator before user-supplied URLs when installing collections from git sources. An attacker who provides a crafted...

CVE-2026-47425

Summary: CVE-2026-47425 affects rattler before 0.43.2, enabling a noarch:python entry-point path traversal that can write files outside the intended install prefix. The issue arises in EntryPoint::FromStr within rattler_conda_types, where only .trim() is applied to the command and a malicious noa...

CGA-F968-M72Q-MVGX

Bulletin has no description...

CGA-368F-WRP9-9QM9

Bulletin has no description...

CGA-2472-75V9-7HGH

Bulletin has no description...

CGA-H3C8-8R7J-7XVG

Bulletin has no description...

CGA-5QXF-RH36-3G5W

Bulletin has no description...

CGA-C3G9-FFX5-4C4G

Bulletin has no description...

UBUNTU-CVE-2026-61898

shell injection in SetLanguage helper scripts...

UBUNTU-CVE-2026-61897

incomplete privilege dropping when calling SetLanguage...

CGA-7CVV-6F2H-3G2C

Bulletin has no description...

CGA-9762-CJ3M-4VVR

Bulletin has no description...

CGA-MMCV-H3H5-7C47

Bulletin has no description...

CGA-C85F-RW4F-6PG7

Bulletin has no description...

glibc: glibc: Out-of-bounds write via TSIG record processing

A flaw was found in glibc, the GNU C Library. Specifically, deprecated functions responsible for printing TSIG Transaction Signature records fail to properly manage memory buffers. This oversight can lead to an out-of-bounds write when processing specially crafted TSIG records. An attacker could...

glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

A flaw was found in glibc GNU C Library. The deprecated functions nsprintrrf, nsprintrr, and fpnquery do not properly validate the length of RDATA Resource Record Data in a DNS Domain Name System response when processing specific record types like LOC, CERT, TKEY, or TSIG. A remote attacker could...

DEBIAN-CVE-2026-8933

A local privilege escalation vulnerability exists in snap-confine, a set-capabilities core component used internally by Canonical snapd to construct the secure execution environment for snap applications. This vulnerability uniquely affects versions of snap-confine configured with set-capabilitie...

CVE-2026-59851

A flaw was found in libssh. On servers with GSSAPIKeyExchange enabled, the gssapi-keyex path does not verify whether the authenticated Kerberos principal is authorized for the requested local user, allowing authenticated clients to log in as arbitrary users...