CVE-2026-98808: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: systemport: Fix buffer overflow in bcmsysportgetstats When running on SYSTEMPORT Lite, certain statistics are unsupported and skipped during bcmsysportgetstats. The variable 'j' tracks the compacted index into the destinatio...

CVE-2026-98704: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: keep fallback association elements alive Associating to a non-transmitted MBSSID profile reads freed memory while determining the operating channel and applying HT capabilities. When an association response omits...

Security update for the Linux Kernel (important)

openSUSE security update: security update for the linux kernel ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22091-1 Rating: important References: bsc1253340 bsc1258335 bsc1260474 bsc1261564 bsc1261816 bsc1264330 bsc1264607 bsc1264747 bsc1266410...

Security update for python-hpack (moderate)

openSUSE security update: security update for python-hpack ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22070-1 Rating: moderate References: bsc1283035 Cross-References: CVE-2026-59980 CVSS scores: CVE-2026-59980 SUSE : 5.3...

Security update for qemu (important)

openSUSE security update: security update for qemu ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22047-1 Rating: important References: bsc1263864 bsc1279962 bsc1282077 bsc1282578 bsc1282918 Cross-References: CVE-2026-81627 CVE-2026-93834 CVSS...

Security update for chromium (important)

openSUSE security update: security update for chromium ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22118-1 Rating: important References: bsc1285401 Cross-References: CVE-2026-110136 CVE-2026-110137 CVE-2026-110138 CVE-2026-110139 CVE-2026-110140...

Security update for pacemaker (important)

openSUSE security update: security update for pacemaker ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22069-1 Rating: important References: bsc1180966 bsc1249217 bsc1255371 bsc1259345 bsc1265183 bsc1265201 bsc1268381 bsc1270354 bsc1271652 bsc12724...

Security update for bcel (moderate)

openSUSE security update: security update for bcel ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22109-1 Rating: moderate References: bsc1284399 bsc1284400 Cross-References: CVE-2026-105111 CVE-2026-94114 CVSS scores: CVE-2026-105111 SUSE : 4.7...

stirling-h2-import-leftover

abraxaslabs.tech · github.com/abraxas ·&...

CVE-2026-111926

Coder from 2.10.0 before 2.34.8 has an unauthenticated agent debug HTTP server on 127.0.0.1:2113 whose /debug/manifest handler returns the full agent manifest, including template-provided environment variable values. A lower-privileged Unix user or process in the same workspace can query this...

CVE-2026-111926 Coder from 2.10.0 before 2.34.8 Information Disclosure via Agent /debug/manifest

Coder from 2.10.0 before 2.34.8 has an unauthenticated agent debug HTTP server on 127.0.0.1:2113 whose /debug/manifest handler returns the full agent manifest, including template-provided environment variable values. A lower-privileged Unix user or process in the same workspace can query this...

EUVD-2026-103293

Coder from 2.10.0 before 2.34.8 has an unauthenticated agent debug HTTP server on 127.0.0.1:2113 whose /debug/manifest handler returns the full agent manifest, including template-provided environment variable values. A lower-privileged Unix user or process in the same workspace can query this...

CVE-2026-111926

Coder from 2.10.0 before 2.34.8 has an unauthenticated agent debug HTTP server on 127.0.0.1:2113 whose /debug/manifest handler returns the full agent manifest, including template-provided environment variable values. A lower-privileged Unix user or process in the same workspace can query this...

CVE-2026-111926

The Coder software versions 2.10.0 through 2.34.8 are vulnerable to an information disclosure flaw. An unauthenticated agent debug HTTP server listening on 127.0.0.1:2113 contains a /debug/manifest handler that returns the full agent manifest. This manifest includes sensitive template-provided en...

CVE-2026-111926 Coder from 2.10.0 before 2.34.8 Information Disclosure via Agent /debug/manifest

Coder from 2.10.0 before 2.34.8 has an unauthenticated agent debug HTTP server on 127.0.0.1:2113 whose /debug/manifest handler returns the full agent manifest, including template-provided environment variable values. A lower-privileged Unix user or process in the same workspace can query this...

CVE-2026-111926 Coder from 2.10.0 before 2.34.8 Information Disclosure via Agent /debug/manifest

Coder from 2.10.0 before 2.34.8 has an unauthenticated agent debug HTTP server on 127.0.0.1:2113 whose /debug/manifest handler returns the full agent manifest, including template-provided environment variable values. A lower-privileged Unix user or process in the same workspace can query this...

OpenTelemetry - CNCF OpenTelemetry Python encryption issue vulnerability

OpenTelemetry – CNCF OpenTelemetry has a security vulnerability in versions 1.5.0 to 1.45.0 of the Python library. This vulnerability stems from improper certificate verification. When the OTELEXPORTEROTLPCERTIFICATE variable is an empty string, TLS verification is disabled, allowing...

Linux Kernel Security Vulnerabilities

There are security vulnerabilities in Linux kernels versions 6.6.15 to 6.7, 6.7.3 to 6.8, and 6.8 itself. These vulnerabilities stem from issues where, when the queue is removed from the host AP configuration and assigned to an intermediary device, the functions vfioapmdevResetQueue and...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from the fact that hcisock does not reject OCF values that exceed the security filtering range. Instead, it uses the 127 mask and 10-bit OCF value to search for commands. As a result, privileged sockets can submit reserved O...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.18 contains security vulnerabilities. These vulnerabilities stem from the fact that in the function cd321xupdatework, the variable typecpartnerdesc is not initialized to zero. Only the variables usbpd, accessory, and identity are initialized. As a result, fields such as...