buildah security update

1.41.8-2.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117178 2:1.41.8-2 - Rebuild with golang 1.25.7 to fix CVE-2025-68121 - Resolves: RHEL-149617...

buildah security update

1.41.8-2.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117178 2:1.41.8-2 - Rebuild for new golang to address CVE-2025-61726 - Resolves: RHEL-146715...

podman security update

5.6.0-14.0.1 - Add devices on container startup, not on creation - overlay: Put should ignore ENINVAL for Unmount Orabug: 36234694 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117404 6:5.6.0-14 - Rebuild for new golang to address CVE-2025-61726 - Resolves: RHEL-146869...

apache-liminal (>=0.0.1.post1, <=0.0.3.post1), apache-liminal-test-spark (0.0.0) +4 more potentially affected by CVE-2024-56373 via apache-airflow (1.10.12)

apache-airflow PYPI version 1.10.12 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - apache-liminal =0.0.1.post1, =0.0.1, =6.0.0, =0.1.0, =0.5.0a9, =0.6.0a15 Source cves: CVE-2024-56373 Source advisory:...

USN-8029-3: Linux kernel (Azure) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - Nios II architecture; - PA-RISC architecture; - RISC-V architecture; -...

org.apache.camel.quarkus:camel-quarkus-integration-test-keycloak (3.31.0), org.apache.camel.quarkus:camel-quarkus-keycloak (>=3.29.0, <=3.31.0) +2 more potentially affected by CVE-2026-23552 via org.apache.camel:camel-keycloak (>=4.15.0, <=4.17.0)

org.apache.camel:camel-keycloak MAVEN version =4.15.0, =3.29.0, =3.29.0, =4.15.0, =4.17.0 Source cves: CVE-2026-23552 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-15353481...

org.apache.camel.quarkus:camel-quarkus-integration-test-leveldb (>=3.29.0, <=3.31.0), org.apache.camel.quarkus:camel-quarkus-leveldb (>=3.29.0, <=3.31.0) +2 more potentially affected by CVE-2026-25747 via org.apache.camel:camel-leveldb (>=4.15.0, <=4.17.0)

org.apache.camel:camel-leveldb MAVEN version =4.15.0, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.17.0 Source cves: CVE-2026-25747 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-15353482...

org.apache.camel.quarkus:camel-quarkus-integration-test-leveldb (>=3.22.0, <=3.27.2), org.apache.camel.quarkus:camel-quarkus-leveldb (>=3.22.0, <=3.27.2) +2 more potentially affected by CVE-2026-25747 via org.apache.camel:camel-leveldb (>=4.11.0, <=4.14.4)

org.apache.camel:camel-leveldb MAVEN version =4.11.0, =3.22.0, =3.22.0, =3.22.0, =4.11.0, =4.14.4 Source cves: CVE-2026-25747 Source advisory: OSV:GHSA-429Q-MRC4-38FR...

org.apache.camel.quarkus:camel-quarkus-integration-test-leveldb (>=3.29.0, <=3.31.0), org.apache.camel.quarkus:camel-quarkus-leveldb (>=3.29.0, <=3.31.0) +2 more potentially affected by CVE-2026-25747 via org.apache.camel:camel-leveldb (>=4.15.0, <=4.17.0)

org.apache.camel:camel-leveldb MAVEN version =4.15.0, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.17.0 Source cves: CVE-2026-25747 Source advisory: OSV:GHSA-429Q-MRC4-38FR...

org.apache.camel.quarkus:camel-quarkus-integration-test-leveldb (>=3.29.0, <=3.31.0), org.apache.camel.quarkus:camel-quarkus-leveldb (>=3.29.0, <=3.31.0) +2 more potentially affected by CVE-2026-25747 via org.apache.camel:camel-leveldb (>=4.15.0, <=4.17.0)

org.apache.camel:camel-leveldb MAVEN version =4.15.0, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.17.0 Source cves: CVE-2026-25747 Source advisory: MEND:CVE-2026-25747...

org.apache.camel.quarkus:camel-quarkus-integration-test-leveldb (>=3.22.0, <=3.27.2), org.apache.camel.quarkus:camel-quarkus-leveldb (>=3.22.0, <=3.27.2) +2 more potentially affected by CVE-2026-25747 via org.apache.camel:camel-leveldb (>=4.11.0, <=4.14.4)

org.apache.camel:camel-leveldb MAVEN version =4.11.0, =3.22.0, =3.22.0, =3.22.0, =4.11.0, =4.14.4 Source cves: CVE-2026-25747 Source advisory: MEND:CVE-2026-25747...

CVE-2026-2912

A vulnerability was found in code-projects Online Reviewer System 1.0. Impacted is an unknown function of the file /system/system/students/assessments/results/studentresult-view.php. The manipulation of the argument testid results in sql injection. It is possible to launch the attack remotely. Th...

CodeHacker: Automated Test Case Generation for Detecting Vulnerabilities in Competitive Programming Solutions

The evaluation of Large Language Models LLMs for code generation relies heavily on the quality and robustness of test cases. However, existing benchmarks often lack coverage for subtle corner cases, allowing incorrect solutions to pass. To bridge this gap, we propose CodeHacker, an automated agen...

PT-2026-21579

Name of the Vulnerable Software and Affected Versions Smolder versions through 1.51 Description Smolder for Perl versions through 1.51 utilizes an insecure rand function for cryptographic operations. Specifically, Smolder::DB::Developer employs the Data::Random library, which relies on the rand...

CVE-2026-2912

A vulnerability was found in code-projects Online Reviewer System 1.0. Impacted is an unknown function of the file /system/system/students/assessments/results/studentresult-view.php. The manipulation of the argument testid results in sql injection. It is possible to launch the attack remotely. Th...

CVE-2026-2912

CVE-2026-2912 affects code-projects Online Reviewer System v1.0. The vulnerability is in /system/system/students/assessments/results/studentresult-view.php, where manipulating the test_id argument triggers SQL injection. Exploitation is remote, and public exploitation has been reported. Multiple ...

CVE-2026-2912

A vulnerability was found in code-projects Online Reviewer System 1.0. Impacted is an unknown function of the file /system/system/students/assessments/results/studentresult-view.php. The manipulation of the argument testid results in sql injection. It is possible to launch the attack remotely. Th...

[SECURITY] Fedora 43 Update: python3.13-3.13.12-1.fc43

Python 3.13 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.13 package provides the "python3.13" executable:...

PT-2026-21412

Name of the Vulnerable Software and Affected Versions code-projects Online Reviewer System version 1.0 Description A SQL injection issue exists in code-projects Online Reviewer System 1.0. The issue is located in the file /system/system/students/assessments/results/studentresult-view.php...

ml-management (>=0.1.0, <=0.4.0), telemed-sk (>=1.1.0, <=1.2.5) +1 more potentially affected by CVE-2026-2033 via mlflow (2.4.0)

mlflow PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - ml-management =0.1.0, =1.1.0, =1.0.0, =1.1.37 Source cves: CVE-2026-2033 Source advisory: OSV:GHSA-Q2R8-VMQ7-FPX2...