Security update for postfix

This update for postfix fixes the following issue CVE-2026-43964: buffer overread and process crash via an enhanced status code that lacks text after the third number bsc1264062. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate o...

CVE-2025-29329

creationtimestamp| type| source ---|---|--- 2026-07-06 11:07:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxx55vsds2i...

MINI-PP3C-H8V7-6M4M

Bulletin has no description...

CVE-2026-14798

creationtimestamp| type| source ---|---|--- 2026-07-06 08:41:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpxoyfymn62b 2026-07-08 16:12:17+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq5j4raelr2d...

OpenStack Image Service (Glance) allows remote authenticated users to bypass access restrictions

OpenStack Image Service Glance before 2014.2.4 juno and 2015.1.x before 2015.1.2 kilo allow remote authenticated users to change the status of their images and bypass access restrictions via the HTTP x-image-meta-status header to images/...

OpenStack Image Service (Glance) vulnerable to Improper Access Control

OpenStack Image Service Glance before 2015.1.3 kilo and 11.0.x before 11.0.2 liberty, when showmultiplelocations is enabled, allow remote authenticated users to change image status and upload new image data by removing the last location of an image...

PYSEC-2026-811 OpenStack Image Service (Glance) vulnerable to Improper Access Control

OpenStack Image Service Glance before 2015.1.3 kilo and 11.0.x before 11.0.2 liberty, when showmultiplelocations is enabled, allow remote authenticated users to change image status and upload new image data by removing the last location of an image...

PYSEC-2026-816 OpenStack Image Service (Glance) allows remote authenticated users to bypass access restrictions

OpenStack Image Service Glance before 2014.2.4 juno and 2015.1.x before 2015.1.2 kilo allow remote authenticated users to change the status of their images and bypass access restrictions via the HTTP x-image-meta-status header to images/...

web2py exposure of sensitive information

web2py before 2.14.2 allows remote attackers to obtain the sessioncookiekey value via a direct request to examples/simpleexamples/status. NOTE: this issue can be leveraged by remote attackers to execute arbitrary code using CVE-2016-3957...

CVE-2026-14802

creationtimestamp| type| source ---|---|--- 2026-07-06 08:02:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpxmshtck52q 2026-07-09 00:29:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq6ewkdnt42a 2026-08-12 08:00:05+00:00| seen|...

CVE-2025-51629

creationtimestamp| type| source ---|---|--- 2026-07-06 06:50:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxisikupi2p...

CVE-2026-14803

creationtimestamp| type| source ---|---|--- 2026-07-06 02:08:01+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwyzahxo32k 2026-07-06 03:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116870796203021611 2026-07-06 03:00:29+00:00| seen|...

RockyLinux 10 : mod_md (RLSA-2026:30845)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:30845 advisory. httpd: modmd: unrestricted OCSP response leads to resource exhaustion CVE-2026-29168 Tenable has extracted the preceding description block directly from the...

CVE-2026-48203

creationtimestamp| type| source ---|---|--- 2026-07-05 20:31:08+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwg6pj4kz2a 2026-07-06 20:32:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpywpgyich2h 2026-07-09 03:36:23+00:00| seen|...

CVE-2026-14761

creationtimestamp| type| source ---|---|--- 2026-07-05 20:07:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpweu4lmsj24 2026-07-06 06:51:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxitreb4b2b...

CVE-2026-38930

creationtimestamp| type| source ---|---|--- 2026-07-05 18:15:56+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpw6n4duc22c...

GHSA-JP82-JPQV-5VV3

creationtimestamp| type| source ---|---|--- 2026-07-05 14:13:06+00:00| seen| https://gist.github.com/ftnext/49c236d15e6d1d49960f59d346e70a25...

GHSA-XR5H-PHRJ-8VXV

creationtimestamp| type| source ---|---|--- 2026-07-05 13:35:41+00:00| seen| https://gist.github.com/konard/88609dd395d6031e4d410d3826dc1450...

mod_md security update

An update is available for modmd. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list This module manages common properties of domains for one or more virtual hosts...

RLSA-2026:30845 Moderate: mod_md security update

This module manages common properties of domains for one or more virtual hosts. Specifically it can use the ACME protocol to automate certificate provisioning. Certificates will be configured for managed domains and their virtual hosts automatically, including at renewal. Security Fixes: httpd:...