Fedora 43 : mbedtls (2026-0bb141710c)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-0bb141710c advisory. - Update to 3.6.7 - Fixes CVE-2026-25832, CVE-2026-35336, CVE-2026-49300, CVE-2026-50579, CVE-2026-50580, CVE-2026-50581, CVE-2026-50583,...

PT-2026-64690

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the binder component. When a thread exits, the binder thread release function iterates through its transaction stack to clear t-from and t-to proc. If a...

PT-2026-64692

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free and double-free issue exists in the Bluetooth btusb component. The problem occurs when controller registration fails, and sibling interfaces are not properly released,...

PT-2026-64676

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The chaoskey driver contains a slab-use-after-free issue within its release routine. This occurs when a user closes the device file after the USB device has been unplugged, causing a...

PT-2026-64597

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak exists in the firmware loader. In the firmware upload register function, if alloc lookup fw priv fails after fw create instance has successfully executed, the system cal...

PT-2026-64553

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the USB ULPI Ultra Low Power Interface component during early device registration failures. The issue arises because the allocated device name is not freed when...

Linux Distros Unpatched Vulnerability : CVE-2026-61723

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS parser validates ptbl chunks with the...

PT-2026-64719

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Industrial I/O IIO buffer hardware consumer where the scan mask is not properly freed during buffer release. This occurred because the scan mask storage was moved ...

PT-2026-64577

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.1.1 Description A memory leak exists in the XFS file system within the xfs dqinode metadir create function. When xfs metadir create fails, the system returns directly, which causes the allocated update and...

PT-2026-64562

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the USB iowarrior driver. The mutex unlock function may access the mutex structure after the lock has been released, meaning it cannot be used to manage...

PT-2026-64561

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the legousbtower USB driver. The problem occurs during a race condition between the release and disconnect functions, where mutex unlock may attempt to...

Linux Distros Unpatched Vulnerability : CVE-2026-64455

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - USB: chaoskey: Fix slab-use-after-free in chaoskeyrelease The chaoskey driver has a use-after-free bug in its release routine. If the user closes the device fil...

Linux Distros Unpatched Vulnerability : CVE-2026-64498

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iio: buffer: hw-consumer: free scanmask on buffer release The scanmask lifetime changed in...

brave-browser v1.95.8

Brave Browser This repository is not needed for building the browser and only holds issues, releases and the wiki. The source code and contributions are at https://github.com/brave/brave-core. You can visit our website to get the latest stable release. Resources Issues: Bug reports and feature...

CVE-2026-48037

Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, AccountFoundation reuse paths silently downgrade GuardDuty / Security Hub posture. This issue has been patched in version 1.4.0...

CVE-2026-48035

Hulumi CVE-2026-48035 affects @hulumi/baseline prior to 1.4.0, enabling deletion of CloudTrail/Config audit logs by any S3-delete-capable principal in AccountFoundation deployments. The issue arises from three defects: (1) startup-hardened audit bucket allowed object deletion because object-lock/...

django-l10n-extensions (>=1.0.1, <=1.1.0), django-l10n-extensions-django-3 (1.0.7) +9 more potentially affected by CVE-2026-73623 via gitpython (1.0.1)

gitpython PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - django-l10n-extensions =1.0.1, =0.1.0, =0.1.0, =0.1.0.dev20160122122211, =0.3.0, =0.3.1, =0.1.0, =0.0.0, =0.1.2, =0.1.18 Source cves:...

cabrita (>=2.2.2b1, <=2.2.2b2), cico (>=0.1.0, <=0.1.8) +4 more potentially affected by CVE-2026-73624 via gitpython (2.1.10)

gitpython PYPI version 2.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - cabrita =2.2.2b1, =0.1.0, =0.1.0, =3.11.1, =0.9.0, =0.9.7.2 Source cves: CVE-2026-73624 Source advisory: OSV:GHSA-FJR4-X663-MWXC...

django-l10n-extensions (>=1.0.1, <=1.1.0), django-l10n-extensions-django-3 (1.0.7) +9 more potentially affected by CVE-2026-69097 via gitpython (1.0.1)

gitpython PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - django-l10n-extensions =1.0.1, =0.1.0, =0.1.0, =0.1.0.dev20160122122211, =0.3.0, =0.3.1, =0.1.0, =0.0.0, =0.1.2, =0.1.18 Source cves:...

cabrita (>=2.2.2b1, <=2.2.2b2), cico (>=0.1.0, <=0.1.8) +4 more potentially affected by CVE-2026-69097 via gitpython (2.1.10)

gitpython PYPI version 2.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on gitpython and may be impacted: - cabrita =2.2.2b1, =0.1.0, =0.1.0, =3.11.1, =0.9.0, =0.9.7.2 Source cves: CVE-2026-69097 Source advisory: OSV:GHSA-3RP5-JJMW-4WV2...