BELL-CVE-2026-46101

Bulletin has no description...

BELL-CVE-2026-46095 CVE-2026-46095 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-46045 CVE-2026-46045 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-46042 CVE-2026-46042 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-46035 CVE-2026-46035 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-46010 CVE-2026-46010 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-45971 CVE-2026-45971 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-45975 CVE-2026-45975 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-45945 CVE-2026-45945 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-45959 CVE-2026-45959 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-45907 CVE-2026-45907 does not affect BellSoft software

Bulletin has no description...

Jupyter Server vulnerable to open redirect

Overview Jupyter Server provided by Jupyter Development Team contains the vulnerability listed below. Open redirect CWE-601 - CVE-2025-61669 Noriaki Iwasaki of Cyber Defense Institute, Inc. reported this vulnerability to IPA and the developer. JPCERT/CC coordinated with the developer to publish t...

com.github.vzakharchenko:keycloak-plugins (>=1.1.0 <=1.2.3), com.github.vzakharchenko:mikrotik-radius-plugin (>=1.1.0 <=1.2.3) +15 more potentially affected by CVE-2026-9803 via org.keycloak:keycloak-services (>=9.0.0 <=9.0.3)

org.keycloak:keycloak-services MAVEN version =9.0.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.2.0, =1.3, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.3 and more Source cves: CVE-2026-9803 Source advisory: SNYK:JAVA-ORGKEYCLOAK-17082663...

[SECURITY] Fedora 44 Update: rrdtool-1.9.0-11.fc44

RRD is the Acronym for Round Robin Database. RRD is a system to store and display time-series data i.e. network bandwidth, machine-room temperature, server load average. It stores the data in a very compact way that will not expand over time, and it presents useful graphs by processing the data t...

Security update for trivy (important)

openSUSE security update: security update for trivy ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20809-1 Rating: important References: bsc1255366 bsc1258094 bsc1258513 bsc1260193 bsc1260971 bsc1261052 bsc1262389 bsc1262893 bsc1264873...

PT-2026-44260

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A data race exists in the Multipath TCP MPTCP implementation. The mptcp pm add timer helper function, which operates as a timer callback in softirq context, fails to properly hold the...

Investigating Detection and Obfuscation of Prompt Injection Attacks against Software Reverse Engineering AI Agents

Agentic software reverse engineering systems are vulnerable to prompt injection attacks placed into the source code of executable binary files. This research demonstrates defensive tactics for detecting the presences of prompt injection strings in the decompiler output of adversarial example...

ALSA-2026:21706 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Bluetooth: MGMT: Fix possible UAFs CVE-2025-39981 kernel: ima: don't clear IMADIGSIG flag when setting or removing non-IMA xattr CVE-2025-68183 kernel: ALSA: firewire-motu: fix buffer...

PT-2026-44127

Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers. This issue affects Escargot: 36f5fb58366a67b713c02f6fd985e924fcc09e31...

CVE-2026-44710 pam_usb: NULL pointer dereference from UDisks device fields causes PAM crash and login denial-of-service

pamusb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, src/device.c passed the return values of udisksdrivegetserial, udisksdrivegetvendor, and udisksdrivegetmodel directly to strcmp without NULL checks. The GIO/UDisks API documentation states these...