CLSA-2026-1787028607 TuxCare security update for pyjwt (1 CVE)

TuxCare rebuilt pyjwt to address 1 CVE. Fixed in 2.3.0.post3+tuxcare...

CVE-2026-75090

A vulnerability was detected in EricLBuehler Mistral.rs up to 0.8.22. Affected by this issue is the function convertgguftohftokenizer of the file mistralrs-core/src/gguf/gguftokenizer.rs of the component GGUF Tokenizer. The manipulation of the argument eostokenid/bostokenid/unknowntokenid results...

MINI-PCP7-PH4V-XJ78

Bulletin has no description...

MINI-C57F-CPG2-JQF5

Bulletin has no description...

MINI-QP2M-5JVF-MP9Q

Bulletin has no description...

MINI-M7WF-XQ6G-CHVF

Bulletin has no description...

CVE-2026-75093 sonos tract ONNX Initializer Loader tensor.rs from_raw_dt_align buffer size

A security vulnerability has been detected in sonos tract up to 0.23.4. This impacts the function Tensor::fromrawdtalign of the file data/src/tensor.rs of the component ONNX Initializer Loader. Such manipulation leads to incorrect calculation of buffer size. The attack may be launched remotely. T...

Allocation of Resources Without Limits or Throttling

Overview apostrophe is a content management system CMS for Node.js. It supports in-context editing, schema-driven content types, flexible widgets and a great deal more. This module contains everything necessary to build a website with ApostropheCMS. Affected versions of this package are vulnerabl...

EUVD-2026-60541

Mattermost versions 11.7.x = 11.7.6, 10.11.x = 10.11.21, 11.8.x = 11.8.3 fail to enforce PermissionManageBoardRoles on the channelId field of the batch endpoint, which allows an authenticated board editor to relink any board they can edit to an arbitrary channel via a crafted PATCH request...

Red Hat Security Advisory 2026-55763-03

Red Hat Security Advisory 2026-55763-03 - An update for kpatch-patch-5140-687101 is now available for Red Hat Enterprise Linux 9...

CVE-2026-53958: Improper Authentication

4gaBoards is a boards system for realtime project management. Prior to 3.3.9, 4gaBoards allows an authenticated user to modify ssoGoogleId, ssoGoogleEmail, ssoGithubId, ssoGithubUsername, ssoGithubEmail, ssoMicrosoftId, ssoMicrosoftEmail, ssoOidcId, and ssoOidcEmail through PATCH /api/users/:id...

Linux Distros Unpatched Vulnerability : CVE-2026-15059

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation. CVE-2026-15059 Note that...

Fedora 43 : linux-firmware (2026-e82e06fcae)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e82e06fcae advisory. Update to 20260810: amdgpu: numerous firmware updates update firmware for MT7922 WiFi device morsemicro: add firmware for mm8108 support ath10k: WCN3990 hw1....

Linux Distros Unpatched Vulnerability : CVE-2026-72331

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix VMA access race aie2populaterange and amdxdnaumaprelease access a saved V...

Linux Distros Unpatched Vulnerability : CVE-2026-74260

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netfilter: nfdupnetdev: add nfdevxmitrecursion helpers and use them Update nftdup and nftfwd...

Linux Distros Unpatched Vulnerability : CVE-2026-74999

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the Add to address book action was subject to stored XSS. CVE-2026-74999 Note that Nessus relies on t...

Linux Distros Unpatched Vulnerability : CVE-2026-72165

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mtd: rawnand: fix condition in 'nandselecttarget' 'cs' here must be in range 0:nanddevntargets. CVE-2026-72165 Note that Nessus relies on the presence of the...

OPENSUSE-SU-2026:11543-1 xrdp-0.10.6.1-1.1 on GA media

These are all security issues fixed in the xrdp-0.10.6.1-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE Security Advisory - SUSE-SU-2026:3634-1

SUSE Security Advisory - This update for rsync fixes the following issues...

PT-2026-78240

Name of the Vulnerable Software and Affected Versions 4gaBoards versions prior to 3.3.9 Description An authenticated user can modify backend-managed identity attributes via the 'PATCH /api/users/:id' endpoint. This occurs because the whitelist in the update.js controller allows mass assignment of...