OESA-2026-4085 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A flaw was found in the QEMU Guest Agent qga. A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. Th...

OESA-2026-4072 rsync security update

Rsync is an open source utility that provides fast incremental file transfer. It uses the "rsync algorithm" which provides a very fast method for bringing remote files into sync. It does this by sending just the differences in the files across the link, without requiring that both sets of files a...

OESA-2026-4059 libvirt security update

Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the libvirtd server exporting the virtualization support. Security Fixes: A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost...

CVE-2026-98141: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ntfs: propagate reparse index insertion failure updatereparsedata ignores the return value of setreparseindex. When index insertion fails, the code removes the just-written reparse data as cleanup but still returns 0, so symlink2...

CVE-2026-100419: Improper Link Resolution Before File Access

gitoxide gix-fs before 0.23.0 contains a path validation bypass vulnerability in the worktree checkout mechanism that allows attackers to escape the worktree directory via symlink manipulation. During forced checkout with overwriteexisting enabled, attackers can craft malicious repository trees...

PT-2026-98500

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read of one byte occurs in the smb2 parse native symlink function when parsing a share-root relative native symlink. The issue arises because memcpy copies data starting...

PT-2026-98803

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NTFS driver where the update reparse data function ignores the return value of set reparse index. If the index insertion fails, the system removes the recently...

CVE-2026-42394

sieve: symlink traversal flaw could result in arbitrary file disclosure...

CVE-2026-80430: Improper Link Resolution Before File Access

Improper Link Resolution Before File Access in the drag source staging path of the drag and drop protocol in kitty from 0.47.0 before 0.49.0 allows a program writing to the terminal to create files and directories at paths outside the staging directory, because subdirdatafordrag in kitty/dnd.c...

UBUNTU-CVE-2026-42394

sieve: symlink traversal flaw could result in arbitrary file disclosure...

CVE-2026-98141

In the Linux kernel, the following vulnerability has been resolved: ntfs: propagate reparse index insertion failure updatereparsedata ignores the return value of setreparseindex. When index insertion fails, the code removes the just-written reparse data as cleanup but still returns 0, so symlink2...

PT-2026-98839

Name of the Vulnerable Software and Affected Versions kitty versions 0.47.0 through 0.48.x Description Improper link resolution in the drag source staging path of the drag and drop protocol allows a program writing to the terminal to create files and directories outside the staging directory. Thi...

CVE-2026-97950: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: configfs: pin the symlink target's dirent instead of chasing -cidentry createlink reads the target's configfsdirent from item-cidentry-dfsdata, relying on the item reference taken by gettarget. That reference pins the item, not i...

CVE-2026-97950

In the Linux kernel, the following vulnerability has been resolved: configfs: pin the symlink target's dirent instead of chasing -cidentry createlink reads the target's configfsdirent from item-cidentry-dfsdata, relying on the item reference taken by gettarget. That reference pins the item, not i...

Linux Distros Unpatched Vulnerability : CVE-2026-98141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ntfs: propagate reparse index insertion failure updatereparsedata ignores the return value o...

Oracle Linux 7 : abrt (ELSA-2026-69121)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-69121 advisory. - Fix symlink following in event handler scripts CVE-2026-54230Orabug: 40051150 - Fix TOCTOU in SetElement/DeleteElement CVE-2026-54228 Orabug: 39811882 Tenabl...

Linux Distros Unpatched Vulnerability : CVE-2026-100419

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gitoxide gix-fs before 0.23.0 contains a path validation bypass vulnerability in the worktree checkout mechanism that allows attackers to escape the worktree...

Linux Distros Unpatched Vulnerability : CVE-2026-97950

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - configfs: pin the symlink target's dirent instead of chasing -cidentry createlink reads the target's configfsdirent from item-cidentry-dfsdata, relying on the...

CVE-2026-93353

copyparty contains a volume restriction bypass vulnerability in its SFTP front end that allows authenticated SFTP users to create, remove, and truncate arbitrary paths outside permitted volume boundaries by exploiting three handlers that bypass the xvol volflag enforcement. The mkdir, rmdir, and...

CVE-2026-93353 copyparty SFTP Volume Restriction Bypass via mkdir/rmdir/chattr Handlers

copyparty contains a volume restriction bypass vulnerability in its SFTP front end that allows authenticated SFTP users to create, remove, and truncate arbitrary paths outside permitted volume boundaries by exploiting three handlers that bypass the xvol volflag enforcement. The mkdir, rmdir, and...