Security update 5.2.1 for Multi-Linux Manager Client Tools

This update fixes the following issues: mgr-push was updated to version 5.2.5: Removed token based authentication mechanism for packagepush bsc1230949 spacecmd was updated to version 5.2.10: Pre-filter errata in systemapplyerrata to avoid using API calls for all existing errata bsc1267261 Updated...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: fpga: microchip-spi: fixed the issue where zero headersize OOB read was performed in mpfopsParseHeader. The mpfopsParseHeader function reads headersize from the bitstream at MPFHEADERSIZEOFFSET 24. When headersize is zero, the...

Malicious code in l10n-mgr (npm)

The package l10n-mgr was found to contain malicious code. --- Credit: OpenSSF source...

PT-2026-93469

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the amdgpu vram mgr init function where drmm cgroup register region is called before INIT LIST HEAD and gpu buddy init. If drmm cgroup register region fails, the...

MGASA-2026-0389 Updated ceph packages fix security vulnerabilities

Updated ceph packages fix various security issues allowing authentication bypasses to gain admin privileges on the OSD, MDS, and MGR services. Notice that some of the fixes require kernel support for aes256k introduced in kernel 7. This update will not break installs using the old and insecure AE...

Updated ceph packages fix security vulnerabilities

Updated ceph packages fix various security issues allowing authentication bypasses to gain admin privileges on the OSD, MDS, and MGR services. Notice that some of the fixes require kernel support for aes256k introduced in kernel 7. This update will not break installs using the old and insecure AE...

Linux Distros Unpatched Vulnerability : CVE-2026-72156

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: fpga: microchip-spi: fix zero headersize OOB read in mpfopsparseheader mpfopsparseheader rea...

CVE-2026-72156 fpga: microchip-spi: fix zero header_size OOB read in mpf_ops_parse_header()

In the Linux kernel, the following vulnerability has been resolved: fpga: microchip-spi: fix zero headersize OOB read in mpfopsparseheader mpfopsparseheader reads headersize from the bitstream at MPFHEADERSIZEOFFSET 24. When headersize is zero, the expression buf + headersize - 1 reads one byte...

com.github.linyuzai:concept-plugin-spring-boot-starter (>=2.0.0, <=3.0.0), de.gematik.test.tiger:tiger-on-fhir (>=1.1.1, <=1.2.1) +6 more potentially affected by CVE-2026-42037 via org.webjars.npm:axios (>=1.4.0, <=1.7.2)

org.webjars.npm:axios MAVEN version =1.4.0, =2.0.0, =1.1.1, =2.1.1, =2.1.1, =2.1.1, =2.1.3, =2.1.1, =1.0.6, =1.0.9 Source cves: CVE-2026-42037 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-16299820...

Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools

This update fixes the following issues: mgr-push: Version 5.2.3-0 Disable build for SLES 16 rhnlib: Version 5.2.4-0 Disable build for SLES 16 spacecmd: Version 5.2.6-0 Update translation strings spacewalk-client-tools: Version 5.2.4-0 Disable build for SLES 16 uyuni-common-libs: Version 5.2.3-0...

BIT-CEPH-2020-10736

An authorization bypass vulnerability was found in Ceph versions 15.2.0 before 15.2.2, where the ceph-mon and ceph-mgr daemons do not properly restrict access, resulting in gaining access to unauthorized resources. This flaw allows an authenticated client to modify the configuration and possibly...

SUSE-SU-2025:4458-1 Security update 5.0.6 for Multi-Linux Manager Client Tools

This update fixes the following issues: dracut-saltboot: - Update to version 1.0.0 Reboot on salt key timeout bsc1237495 Fixed parsing files with space in the name bsc1252100 grafana was updated from version 11.5.5 to 11.5.10: - Security issues fixed: CVE-2025-47911: Fix parsing HTML documents...

CVE-2025-64993 Command Injection in 1E-ConfigMgrConsoleExtensions Instructions

A command injection vulnerability was discovered in TeamViewer DEX former 1E DEX, specifically within the 1E-ConfigMgrConsoleExtensions instructions. Improper input validation, allowing authenticated attackers with Actioner privileges to inject arbitrary commands. Exploitation enables remote...

EUVD-2018-19011

Malware in sbrugna...

EUVD-2022-42298

Malicious code in bioql PyPI...

MAL-2025-24853 Malicious code in l10n-mgr (npm)

The package l10n-mgr was found to contain malicious code...

ASRMicro ASR Series security vulnerabilities

The Asrmicro ASR Series is a series of chips from China's Avantage Technology Asrmicro. A security vulnerability exists in Asrmicro ASR Series, which originates from an improper resource release in the dialertask.C file in the conmgr component, which could lead to a resource leak...

CVE-2022-39853

A use after free vulnerability in perf-mgr driver prior to SMR Oct-2022 Release 1 allows attacker to cause memory access fault...

Linux GPU DRM XE DoS

The vulnerability of the xettmstolenmgrinit function in the drivers/gpu/drm/xe/xettmstolenmgr.c file of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2025-16733

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version Description A vulnerability in the Linux kernel has been resolved. The issue occurs when the ASIC does not support DMUB, causing ctx-dmub srv to be NULL. This value is then dereferenced in dmub ...