Posted by Wilfred Spiegelenburg on Oct 07 Severity: CVSS 4.0: 4.8 (medium) CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N Affected versions: - Apache YuniKorn before 1.10.0…
Tuskira’s AI Agent Gateway is an open-source solution that sits between AI agents and everything they call: the MCP tool servers that connect them to services like GitHub and Jira, and the model…
Posted by Peter Hutterer on Oct 06 X.Org Security Advisory: October 07, 2026 Issues in X.Org X server prior to xorg-server-21.1.25 and Xwayland prior to xwayland-24.1.14 Multiple issues have been…
The OpenSSH team released version 10.6 on Oct. 6 and said it will ship releases more often for now to get bugfixes into users’ hands more quickly. The maintainers have received a large number of…
Posted by Michael Smith on Oct 06 Severity: low Affected versions: - Apache Impala 4.1.0 through 4.5.2 Description: Incorrect implementation of JWT/OAuth authentication in Impala executors in Apache…
Posted by Michael Smith on Oct 06 Severity: moderate Affected versions: - Apache Impala 2.7.0 through 4.5.2 Description: An SQL user using Impala up to and including version 4.5.2 with only SELECT…
Posted by Michael Smith on Oct 06 Severity: important Affected versions: - Apache Impala 4.5.2 before 4.5.3 Description: Path traversal of 'trusted_jar_paths' in Impala 4.5.2 allows an…
Posted by Jan Friedrich on Oct 06 Severity: moderate CVSS 3.1: 5.3 (medium) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected versions: - Apache log4net 1.2.12 before 3.5.0 - Apache log4net…
Posted by Jan Friedrich on Oct 06 Severity: moderate CVSS 3.1: 5.3 (medium) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected versions: - Apache log4net 1.2.9 before 3.5.0 - Apache log4net…
Posted by Jan Friedrich on Oct 06 Severity: moderate CVSS 3.1: 5.3 (medium) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected versions: - Apache log4net 1.2.9 before 3.5.0 - Apache log4net…
Posted by Jan Friedrich on Oct 06 Severity: moderate CVSS 3.1: 5.3 (medium) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected versions: - Apache log4net 1.2.11 before 3.5.0 - Apache log4net…
Posted by Jan Friedrich on Oct 06 Severity: moderate CVSS 3.1: 5.3 (medium) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected versions: - Apache log4net 1.2.9 before 3.5.0 - Apache log4net…
Posted by Jan Friedrich on Oct 06 Severity: moderate CVSS 3.1: 5.3 (medium) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected versions: - Apache log4net 1.2.9 before 3.5.0 - Apache log4net…
Posted by Ondrej Gajdusek on Oct 06 Hi, A security fix has been released in Foreman Remote Execution, an open-source plugin for Foreman, an open-source lifecycle management tool for physical and…
Posted by Ondrej Gajdusek on Oct 06 Hi, A security fix has been released in Foreman, an open-source lifecycle management tool for physical and virtual servers. CVE-2026-12423: Foreman: provisioning…
Posted by Ondrej Gajdusek on Oct 06 Hi, A security fix has been released in Foreman, an open-source lifecycle management tool for physical and virtual servers. CVE-2026-12540: Foreman: command…