PT-2026-76706

In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log...

Important: perl-Net-DNS

Issue Overview: Net::DNS versions through 1.55 for Perl allow Denial of Service via deep DNS compression pointer chains. Net::DNS::DomainName::decode follows RFC 1035 compression pointers by recursing into itself with no depth limit. It is possible to construct a name which saturates the call sta...

Important: rust

Issue Overview: RustCrypto CMOV provides conditional move CPU intrinsics which are guaranteed on major platforms to execute in constant-time and not be rewritten as branches by the compiler. From 0.1.1 until 0.5.4, the aarch64 implementations of Cmov and CmovEq in cmov/src/backends/aarch64.rs...

Important: rust

Issue Overview: rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.10.50 until 0.10.80, CipherCtxRef::cipherupdateinplace in openssl/src/cipherctx.rs incorrectly sized output buffers when used with AES key-wrap-with-padding ciphers EVPaes128,192,256wrappad. For a...

Important: rust-cargo-c

Issue Overview: libgit2 Submodule path traversal CVE-2026-53584 Unbounded Memory Allocation via Delta Object Result-Size Header CVE-2026-53585 libgit2 version 1.9.4 and below is vulnerable to a heap out-of-bounds read in setdata in src/libgit2/transports/smartpkt.c. The vulnerable code uses a...

Important: unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fixes: unbound: Unbound: Cache poisoning via insufficient RRSIG.Labels validation and premature cache writes CVE-2026-44690 unbound: Unbound: Denial of Service via malformed EDNS Report-Channel opti...

openSUSE 16: git-cliff / git-cliff-bash-completion / git-cliff-fish-completion / etc (openSUSE-SU-2026:21584-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21584-1 advisory. Changes in git-cliff: - Update to version 2.13.1: Support more configuration file locations Add per-commit statistics Expose determined bump typ...

RHEL 8 : unbound (RHSA-2026:55784)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:55784 advisory. The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fixes: unbound: Unbound: Cache poisoning via...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100297)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100297 advisory. In the Linux kernel, the following vulnerability has been resolved: dm: clear cloned request bio pointer when last clone bio completes Stale rq-bio values have been...

The vulnerability of the Repo.archive() function in the Python library for interacting with Git repositories in GitPython allows a perpetrator to execute arbitrary code.

The vulnerability of the Repo.archive function in the Python library for interacting with Git repositories in GitPython is related to improper external handling of file names or paths when processing the unsafegitarchiveoptions parameter. Exploiting this vulnerability may allow a remote attacker ...

The vulnerabilities of the functions IndexFile.checkout() and TagReference.create() in the GitPython library for interacting with git repositories allow a malicious individual to gain unauthorized access to protected information.

The vulnerability of the functions IndexFile.checkout and TagReference.create in the GitPython library for interacting with git repositories is related to an incorrect path name limitation when processing the kwargs parameter. Exploiting this vulnerability could allow a malicious actor to gain...

The vulnerability of the drivers/net/macvlan.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability in the drivers/net/macvlan.c component of the Linux operating system is related to a situation where there is a race condition in the signal processing mechanism. Exploiting this vulnerability can allow an attacker to cause a service failure...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: Drop the lock in skbmaytxtimestamp CVE-2026-43216 In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: strictly check for maximum number of actions CVE-2026-43329 In the...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: reject zero filehandle version count CVE-2026-53392 In the Linux kernel, the following vulnerability has been resolved: nfsd: reset write verifier on deferred writeback errors CVE-2026-53393 In th...

ALSA-2026:55784 Important: unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fixes: unbound: Unbound: Cache poisoning via insufficient RRSIG.Labels validation and premature cache writes CVE-2026-44690 For more details about the security issues, including the impact, a CVSS...

ALSA-2026:55892 Important: unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fixes: unbound: Unbound: Cache poisoning via insufficient RRSIG.Labels validation and premature cache writes CVE-2026-44690 unbound: Unbound: Denial of Service via malformed EDNS Report-Channel opti...

Important: perl-Net-DNS

Issue Overview: Net::DNS versions through 1.55 for Perl allow remote execution injection via EDNS EXTENDED ERROR. Net::DNS::RR::OPT::EXTENDEDERROR::decompose parses the EXTRA-TEXT field of an EDNS EXTENDED-ERROR option RFC 8914 by tokenising the raw bytes and passing the result to Perl's eval...

PT-2026-76717

Name of the Vulnerable Software and Affected Versions deepmerge-ts versions prior to 8.0.0 Description The library fails to track visited objects or object pairs during the recursive merging of records. When two input values contain self-references at the same property path, the merge logic...

Important: kernel6.12

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clear Present bit before tearing down context entry CVE-2026-45944 In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: take vmappurgelock in shrinker CVE-2026-46093 In the...

The vulnerability of the nft_add_set_elem() function in the net/netfilter/nf_tables_api.c kernel module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the nftaddsetelem function in the net/netfilter/nftablesapi.c kernel module of the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...