PT-2026-61146

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where the sk msg sg.copy bitmap, which tracks scatterlist entry ownership, becomes desynchronized during certain transformations. The sg.copy bitmap i...

Unbreakable Enterprise kernel security update

6.12.0-204.92.4.3 - xfrm: hold dev ref until after transportfinish NFHOOK Qi Tang Orabug: 39727259 CVE-2026-31663 - xfrm: hold device only for the asynchronous decryption Jianbo Liu Orabug: 39727259 - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry Hyunwoo Kim...

data-prep-toolkit-transforms (>=0.2.1.dev3, <=0.2.1) potentially affected by CVE-2026-31248 via docling (1.11.0)

docling PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on docling and may be impacted: - data-prep-toolkit-transforms =0.2.1.dev3, =0.2.1 Source cves: CVE-2026-31248 Source advisory: OSV:PYSEC-2026-2454...

data-prep-toolkit-transforms (>=0.2.1.dev0, <=0.2.1.dev2), data-prep-toolkit-transforms-ray (>=0.2.1.dev0, <=0.2.1.dev2) potentially affected by CVE-2026-31248 via docling (1.1.2)

docling PYPI version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on docling and may be impacted: - data-prep-toolkit-transforms =0.2.1.dev0, =0.2.1.dev0, =0.2.1.dev2 Source cves: CVE-2026-31248 Source advisory: OSV:PYSEC-2026-2454...

data-prep-toolkit-transforms (>=0.2.1.dev0, <=0.2.1.dev2), data-prep-toolkit-transforms-ray (>=0.2.1.dev0, <=0.2.1.dev2) potentially affected by CVE-2026-31247 via docling (1.1.2)

docling PYPI version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on docling and may be impacted: - data-prep-toolkit-transforms =0.2.1.dev0, =0.2.1.dev0, =0.2.1.dev2 Source cves: CVE-2026-31247 Source advisory: OSV:PYSEC-2026-2455...

data-prep-toolkit-transforms (>=0.2.1.dev3, <=0.2.1) potentially affected by CVE-2026-31247 via docling (1.11.0)

docling PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on docling and may be impacted: - data-prep-toolkit-transforms =0.2.1.dev3, =0.2.1 Source cves: CVE-2026-31247 Source advisory: OSV:PYSEC-2026-2455...

[SECURITY] Fedora 44 Update: leptonica-1.87.0-4.fc44

The library supports many operations that are useful on Document images Natural images Fundamental image processing and image analysis operations Rasterop aka bitblt Affine transforms scaling, translation, rotation, shear on images of arbitrary pixel depth Projective and bi-linear transforms Bina...

SimpleSAMLphp has Possible DoS via XPath Transform

Summary This library turned out to be vulnerable to Denial-of-Service attacks using XPath transforms. A mitigation has been put in place to restrict the number of transforms and to restrict transforms to only the transform-algorithms mentioned in the SAML 2.0 Core Specifications and specifically...

GHSA-5CJR-MXJ5-WMRX SimpleSAMLphp has Possible DoS via XPath Transform

Summary This library turned out to be vulnerable to Denial-of-Service attacks using XPath transforms. A mitigation has been put in place to restrict the number of transforms and to restrict transforms to only the transform-algorithms mentioned in the SAML 2.0 Core Specifications and specifically...

PT-2026-55362

Summary This library turned out to be vulnerable to Denial-of-Service attacks using XPath transforms. A mitigation has been put in place to restrict the number of transforms and to restrict transforms to only the transform-algorithms mentioned in the SAML 2.0 Core Specifications and specifically...

PT-2026-55454

Name of the Vulnerable Software and Affected Versions SimpleSAMLphp versions 4.19.2 through 4.19.2 SimpleSAMLphp versions 4.20.2 through 4.20.2 Description The SAML2 library permits attacker-controlled XPath transforms during the processing of XML signatures in specially crafted SAML messages...

data-prep-toolkit-transforms (>=0.2.1.dev0, <=0.2.1.dev2), data-prep-toolkit-transforms-ray (>=0.2.1.dev0, <=0.2.1.dev2) potentially affected by CVE-2026-47214 via docling (1.1.2)

docling PYPI version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on docling and may be impacted: - data-prep-toolkit-transforms =0.2.1.dev0, =0.2.1.dev0, =0.2.1.dev2 Source cves: CVE-2026-47214 Source advisory: OSV:PYSEC-2026-2146...

data-prep-toolkit-transforms (>=0.2.1.dev3, <=0.2.1) potentially affected by CVE-2026-47214 via docling (1.11.0)

docling PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on docling and may be impacted: - data-prep-toolkit-transforms =0.2.1.dev3, =0.2.1 Source cves: CVE-2026-47214 Source advisory: OSV:PYSEC-2026-2146...

SUSE CVE-2026-52920

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtpolicy: fix strict mode inbound policy matching matchpolicyin walks secpath entries from the last transform to the first one, but strict policy matching needs to consume info-pol in the same forward order as the rule...

data-prep-toolkit-transforms (>=0.2.1.dev3, <=0.2.1) potentially affected by CVE-2026-44017 via docling (1.11.0)

docling PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on docling and may be impacted: - data-prep-toolkit-transforms =0.2.1.dev3, =0.2.1 Source cves: CVE-2026-44017 Source advisory: OSV:PYSEC-2026-2143...

data-prep-toolkit-transforms (>=0.2.1.dev0, <=0.2.1.dev2), data-prep-toolkit-transforms-ray (>=0.2.1.dev0, <=0.2.1.dev2) potentially affected by CVE-2026-44017 via docling (1.1.2)

docling PYPI version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on docling and may be impacted: - data-prep-toolkit-transforms =0.2.1.dev0, =0.2.1.dev0, =0.2.1.dev2 Source cves: CVE-2026-44017 Source advisory: OSV:PYSEC-2026-2143...

CVE-2026-52920

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtpolicy: fix strict mode inbound policy matching matchpolicyin walks secpath entries from the last transform to the first one, but strict policy matching needs to consume info-pol in the same forward order as the rule...

CVE-2026-52920

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtpolicy: fix strict mode inbound policy matching matchpolicyin walks secpath entries from the last transform to the first one, but strict policy matching needs to consume info-pol in the same forward order as the rule...

CVE-2026-52920 netfilter: xt_policy: fix strict mode inbound policy matching

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtpolicy: fix strict mode inbound policy matching matchpolicyin walks secpath entries from the last transform to the first one, but strict policy matching needs to consume info-pol in the same forward order as the rule...

CVE-2026-52920

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtpolicy: fix strict mode inbound policy matching matchpolicyin walks secpath entries from the last transform to the first one, but strict policy matching needs to consume info-pol in the same forward order as the rule...