GHSA-QC2Q-P7WX-3PX3 vulnerabilities

Vulnerabilities for packages: argo-cd, cloud-provider-vsphere, k8ssandra-client, kubernetes-csi-external-resizer, grafana-mimir, trillian, cloud-provider-azure-fips, kuma, amazon-ssm-agent-fips, gcp-compute-persistent-disk-csi-driver-fips, bank-vaults, hydra, k8s-device-plugin,...

CVE-2026-76218 vulnerabilities

Vulnerabilities for packages: mlflow, opal, checkov, awx...

CVE-2026-76222 vulnerabilities

Vulnerabilities for packages: mlflow, opal, checkov, awx...

GHSA-3MCP-22MF-VRW3 vulnerabilities

Vulnerabilities for packages: librechat, kubeflow-centraldashboard, kibana, opensearch-dashboards-fips, wazuh-dashboard-fips, jitsucom-jitsu, langfuse-fips, redisinsight, nextcloud-server, gitlab-rails-ce, langfuse, awx, lerna, gitlab-rails-ce-fips, prism, wazuh-dashboard, semaphore, azurite,...

GHSA-4VPG-PFJ8-M33Q vulnerabilities

Vulnerabilities for packages: checkov, mlflow...

CVE-2026-76217 vulnerabilities

Vulnerabilities for packages: checkov, mlflow...

CVE-2026-67323 vulnerabilities

Vulnerabilities for packages: checkov, mlflow...

CVE-2026-71614

An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the src/mediatools/dvbmpe.c, descriptorTimeslicefecidentifier and gfm2tsipdatagramreader components. Fixed in 0e4093392e1f847c90d20e031e893cd942fef938...

CVE-2026-71616

An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to cause a denial of service via the function gfroutemediacompleteobject. Fixed in 3c4e6c5b3e0c6fa9b16d55599701a08354538fab...

UBUNTU-CVE-2026-71614

An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the src/mediatools/dvbmpe.c, descriptorTimeslicefecidentifier and gfm2tsipdatagramreader components. Fixed in 0e4093392e1f847c90d20e031e893cd942fef938...

Updated wget packages fix a security vulnerability

Denial of Service in GNU wget. CVE-2026-16599...

CVE-2026-80923

In the Linux kernel, the following vulnerability has been resolved: xhci: dbgtty: Fix unregister on ttyregisterdriver failure If ttyregisterdriver fails, it drops the reference, but fails to set the global dbcttydriver to NULL, causing the unregister to be called again when module exits. On modul...

CVE-2026-80916

In the Linux kernel, the following vulnerability has been resolved: kcov: fix data corruption and race conditions on PREEMPTRT syzbot is reporting KCOV state corruption on PREEMPTRT kernels, for the temporary storage used for saving/restoring remote KCOV state is currently allocated as the per-CP...

UBUNTU-CVE-2026-80925

In the Linux kernel, the following vulnerability has been resolved: vlan: fix skbunderpanic and races when toggling HW VLAN offload Toggling hardware VLAN TX offload NETIFFHWVLANCTAGTX or NETIFFHWVLANSTAGTX on a lower device invokes vlantransferfeatures, which dynamically changed...

UBUNTU-CVE-2026-80918

In the Linux kernel, the following vulnerability has been resolved: HID: core: fix number/pointer type confusion on long items When fetchitem is called by hidscanreport on an item with HIDITEMTAGLONG, it stores a pointer to the item data in item-data.longdata instead of storing a value directly i...

UBUNTU-CVE-2026-80917

In the Linux kernel, the following vulnerability has been resolved: PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems On 32-bit systems the config space is too large to ioremap in one go, so pciecamcreate maps each bus segment separately and relies on the -addbus callback...

UBUNTU-CVE-2026-80915

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix DPT allocation paths. Remove the fallback for VRAM to system memory, I tested it and that doesn't work at all, only a black screen with pipe fault errors were observed. On systems with media GT, extra latency is added...

CVE-2026-80919

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix recursive wwmutex acquire in amdgpudevcoredumpformat When dumping IB contents from a hung job, amdgpudevcoredumpformat acquired the VM root PD's reservation via amdgpuvmlockbypasid and then, for each IB, called...

CVE-2026-80924

In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - use kfreesensitive for derived key buffers cryptokrb5prepareencryption and cryptokrb5preparechecksum free the buffer holding the freshly derived keys with plain kfree, leaving the key material behind in the freed...

CVE-2026-80914

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix use-after-free of listener socket in isoconnready isoconnready looks up the BIS listener socket with isogetsock, which takes a reference, and then, without re-checking its state, creates a child socket from it...