SUSE-SU-2026:3612-1 Security update for dracut

This update for dracut fixes the following issue: Update to version 059+suse.567.gf5cfeb7f7. Securitys issue fixed: - CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in die bsc1274432. Other updates and bugfixes: - Fixbase: sanitize message...

CVE-2026-13048

The Data::MuForm::Localizer Perl module (versions through 0.05 ) is vulnerable to remote code execution due to improper neutralization of directives in dynamically evaluated code. The load_lexicon function fails to validate the language attribute, allowing an attacker to use ../ segments to trave...

CVE-2026-13048 Data::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because load_lexicon interpolates the language attribute into the catalog filename

Data::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because loadlexicon interpolates the language attribute into the catalog filename. loadlexicon builds the catalog path by appending Messages/$lang.po to the directory...

SUSE CVE-2026-73583

A flaw was found in sblim-sfcb. A local attacker with access to the system can exploit an unsafe deserialization vulnerability in the provider-manager's inter-process communication IPC message parsing. By sending a specially crafted message, the attacker can cause out-of-bounds memory access,...

Important: Red Hat Security Advisory: dracut security update

An update for dracut is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

CVE-2026-65934

An unencrypted 'pause encryption request' message causes a denial of service in the BT122 module. See vulnerability B-E10 in the related paper below...

CVE-2026-73555 vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error Messages

vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the validationexceptionhandler in vllm/entrypoints/openai/serverutils.py converts FastAPI RequestValidationError objects with strexc, and sanitizemessage in vllm/entrypoints/utils.py does not remove traceback-styl...

EUVD-2026-58096

rsync before 3.5.0 contains a newline injection vulnerability in the name-converter uid/gid mapping interface that allows local attackers to forge protocol messages by creating user or group names containing newline characters. Attackers can inject malicious newline characters into names...

CVE-2026-53788 rsync < 3.5.0 Newline Injection via name-converter uid/gid mapping

rsync before 3.5.0 contains a newline injection vulnerability in the name-converter uid/gid mapping interface that allows local attackers to forge protocol messages by creating user or group names containing newline characters. Attackers can inject malicious newline characters into names...

CVE-2026-53788

CVE-2026-53788 affects rsync prior to 3.5.0. A newline injection in the name-converter uid/gid mapping interface lets local attackers forge protocol messages by embedding newline characters in user/group names, causing the rsync daemon to treat attacker-controlled data as legitimate protocol inpu...

EUVD-2026-58085

A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below...

CVE-2026-65934 BT122 plaintext pause encryption request causes DOS

An unencrypted 'pause encryption request' message causes a denial of service in the BT122 module. See vulnerability B-E10 in the related paper below...

CVE-2026-65934

CVE-2026-65934 affects the BT122 module; an unencrypted “pause encryption request” message can cause a denial of service. The vulnerability is described in multiple sources (NVD/CVE records and CVE history) with a CVSSv4 base score of 7.1 (HIGH) and an adjacent ATT&CK-like risk under the vulnerab...

CVE-2026-65934

An unencrypted 'pause encryption request' message causes a denial of service in the BT122 module. See vulnerability B-E10 in the related paper below...

EUVD-2026-58080

An unencrypted 'pause encryption request' message causes a denial of service in the BT122 module. See vulnerability B-E10 in the related paper below...

CVE-2026-65934 BT122 plaintext pause encryption request causes DOS

An unencrypted 'pause encryption request' message causes a denial of service in the BT122 module. See vulnerability B-E10 in the related paper below...

CVE-2026-65933

A malformed Bluetooth connection request message can cause the BT122 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below...

CVE-2026-65932

The CVE-2026-65932 entry concerns the BT122 module. According to the connected records, the affected component is the BT122 module itself, and the issue occurs when it receives a plaintext 'pause enceryption response' message, which causes the device to stop advertising. This results in a denial ...

CVE-2026-65932 BT122 stops advertising

The BT122 module stops advertising after receiving a plaintext 'pause enceryption response' message resulting in a denial of service. See vulnerability B-E2 in the related paper below...

CVE-2026-65932

The BT122 module stops advertising after receiving a plaintext 'pause enceryption response' message resulting in a denial of service. See vulnerability B-E2 in the related paper below...