CLSA-2026-1777250312 TuxCare security update for 39 packages (1 CVE)

TuxCare rebuilt 39 packages to address 1 CVE. Fixed in 10.1.18-tuxcare.5...

CLSA-2026-1776299665 TuxCare security update for 39 packages (3 CVEs)

TuxCare rebuilt 39 packages to address 3 CVEs. Fixed in 10.1.18-tuxcare.3...

CLSA-2026-1772496672 TuxCare security update for 39 packages (1 CVE)

TuxCare rebuilt 39 packages to address 1 CVE. Fixed in 10.1.18-tuxcare.2...

CLSA-2026-1768262917 TuxCare security update for 39 packages (22 CVEs)

TuxCare rebuilt 39 packages to address 22 CVEs. Fixed in 10.1.18-tuxcare.1...

CLSA-2026-1771978235 TuxCare security update for 39 packages (1 CVE)

TuxCare rebuilt 39 packages to address 1 CVE. Fixed in 9.0.100-tuxcare.3...

CLSA-2025-1766448497 TuxCare security update for 39 packages (2 CVEs)

TuxCare rebuilt 39 packages to address 2 CVEs. Fixed in 9.0.100-tuxcare.2...

CLSA-2025-1766362095 TuxCare security update for 39 packages (12 CVEs)

TuxCare rebuilt 39 packages to address 12 CVEs. Fixed in 9.0.100-tuxcare.1...

MGASA-2026-0312 Updated kernel, kmod, bluez, firmware, wireless-regdb and drakx-installer-images packages fix security vulnerabilities

Upstream kernel version 6.18.39 fixes bugs and vulnerabilities. The kmod, bluez, wireless-regdb, firmware and drakx-installer-images packages have been updated to work with this new kernel...

EUVD-2026-46351

DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. DHIS2 SQL View data endpoints allowed authenticated users with SQL View access to provide crafted filter values that were interpolated into generated SQL. An authenticated user with acces...

CVE-2026-55082 DHIS2 SQL injection in SQL View filter values

DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. DHIS2 SQL View data endpoints allowed authenticated users with SQL View access to provide crafted filter values that were interpolated into generated SQL. An authenticated user with acces...

MINI-XP44-FW39-W64R

Bulletin has no description...

CVE-2026-50136

Budibase is an open-source low-code platform. Prior to 3.39.3, the application server exposes an unauthenticated endpoint that generates S3 PutObject presigned URLs using credentials stored in a workspace datasource. The route is protected only by the recaptcha middleware and does not require...

python3.9 security update

3.9.25-7.0.1 - Remove upstream URL reference 3.9.25-7 - Security fixes for CVE-2026-4786 and CVE-2026-6100 Resolves: RHEL-167919, RHEL-168161 3.9.25-6 - Security fix for CVE-2026-4519 Resolves: RHEL-158117 3.9.25-5 - Rebuilding previous fixes for different build target Related: RHEL-143117,...

MAL-2026-5354 Malicious code in defi-tools-39 (npm)

Crypto/SSH/wallet stealer, blockchain-helper-0 campaign sibling c960+, byte-identical to swap-sdk-87. postinstall auto-execs, src/index.js harvests /.ssh keys + Sol/Eth/BTC/Tron/Sui/Aptos wallets + .env + seeds, self-labels "CRYPTO STEALER", exfils to SAME Telegram bot 8227918239 chat 6433587894...

MINI-GFX8-XPFW-RC39

Bulletin has no description...

MINI-526Q-5PHR-8X39

Bulletin has no description...

MINI-GJ5M-278V-39HP

Bulletin has no description...

CVE-2026-48151

Budibase is an open-source low-code platform. Prior to 3.39.0, the webhook schema-building endpoint is registered under builderRoutes, but the generic authorization middleware skips authorization for all paths matching /api/webhooks/schema. As a result, an unauthenticated caller can update the bo...

CVE-2026-48153

Budibase: CVE-2026-48153 affects Budibase before 3.39.0. The OAuth2 SDK’s fetchToken makes a POST to a builder-supplied URL using plain node-fetch and bypasses the isBlacklisted outbound-fetch path check, and the OAuth2 URL Joi schema has no scheme/host restrictions. This enables SSRF to reach in...

CVE-2026-40610

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. In versions 1.4.38 and prior, the build packaging workflow follows attacker-controlled symlinks inside the build context and copies the referenced file contents into the generated Bento...