Security Bulletin: IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities

Summary IBM Enterprise Build of Quarkus is affected by vulnerabilities in Eclipse Vert.x, Eclipse Netty, LangChain4j and Apache Httpcore Vulnerability Details CVEID:CVE-2026-54399 DESCRIPTION: Uncontrolled Resource Consumption vulnerability in the HTTP/1.1 message parser in Apache HttpComponents...

perl:5.32 security update

An update is available for perl-Module-Build, perl-threads, perl-perlfaq, module.perl-File-Temp, perl-Module-Metadata, module.perl, perl-File-HomeDir, perl-Getopt-Long, perl-Sys-Syslog, perl-Math-BigRat, module.perl-Object-HashBase, perl-URI, module.perl-version, module.perl-Exporter,...

CVE-2026-17907

A flaw was found in Google Chrome's Network component. A remote attacker could exploit this side-channel information leakage vulnerability by enticing a user to visit a specially crafted HTML page. This could allow the attacker to leak sensitive cross-origin data...

CVE-2026-17878

An inappropriate implementation flaw was found in the CSS component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=522781838...

CVE-2026-17853

An inappropriate implementation flaw was found in the DevTools component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519472272...

MZ Automation GmbH libiec61850

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition on the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network...

CVE-2026-17732

An inappropriate implementation flaw was found in the SVG component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=476646486...

CVE-2026-17781

An inappropriate implementation flaw was found in the Extensions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513502990...

CVE-2026-17808

An uninitialized use flaw was found in the WebGL component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=516778390...

CVE-2026-17778

A flaw was found in Google Chrome. This use-after-free vulnerability in the Extensions component allows a remote attacker to execute arbitrary code within a sandbox. This can be exploited by convincing a user to install a specially crafted Chrome Extension...

CVE-2026-17975

An inappropriate implementation flaw was found in the IME component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519233776...

CVE-2026-17823

A flaw was found in Google Chrome's WebXR component. This vulnerability, caused by insufficient policy enforcement, could allow a remote attacker to bypass the same-origin policy. By crafting a malicious HTML page, an attacker could exploit this to gain unauthorized access to sensitive informatio...

CVE-2026-17858

An uninitialized use flaw was found in the WebNN component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=520191468...

CVE-2026-17865

An inappropriate implementation flaw was found in the Crypto component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=520516655...

CVE-2026-64258

A flaw was found in the fuse-uring component of the Linux kernel. When a copy operation to the userspace ring buffer fails, a request can be terminated improperly, leading to a NULL pointer dereference. This vulnerability could allow a local attacker to cause a system crash, resulting in a Denial...

CVE-2026-17735

An insufficient validation of untrusted input flaw was found in the BFCache component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=496569497...

CVE-2026-17928

An inappropriate implementation flaw was found in the DataTransfer component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513762372...

CVE-2026-64426

A flaw was found in the Linux kernel's iouring/nop component. A local user could exploit this by submitting a specially crafted no-operation NOP request. This could lead to a file reference not being properly released, resulting in a memory leak. Over time, this memory leak could impact system...

kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation

A flaw was found in the Linux kernel's AMD display component. This vulnerability arises from incorrect validation of display mode changes during Display Stream Compression DSC processing. A local attacker could exploit this by initiating specific display configuration changes, which may lead to a...

kernel: net: sched: act_csum: validate nested VLAN headers

A flaw was found in the Linux kernel's network scheduler component. A remote attacker could send specially crafted network packets containing nested Virtual Local Area Network VLAN headers. This could cause the kernel to read beyond allocated memory, leading to a system crash and a denial of...