Aggregator

It was discovered that Yodl incorrectly handled certain input, leading to a buffer over-read. An attacker could possibly use this issue to cause Yodl to crash, resulting in a denial of service.

It was discovered that SNMPTT did not properly sanitize trap data passed to commands run through the EXEC, PREEXEC, and unknown_trap_exec options. A remote attacker could possibly use this issue to execute arbitrary shell commands.

It was discovered that kramdown processed the template option in documents by default. An attacker could possibly use this issue to read arbitrary files or execute arbitrary code.

It was discovered that ruby-jwt incorrectly verified HMAC signatures when the verification key was empty or missing. A remote attacker could possibly use this issue to forge tokens and bypass authentication.

It was discovered that Action Pack Page Caching incorrectly handled certain request paths when writing cached pages. A remote attacker could possibly use this issue to write arbitrary files to the web server, and possibly execute arbitrary code.

It was discovered that rkhunter downloaded mirror updates over an insecure channel. A remote attacker could possibly use this issue to execute arbitrary code.

It was discovered that the LDAP authentication modules in Prosody Community Modules did not fully verify XMPP addresses when checking for administrator privileges. A remote attacker could possibly use this issue to gain administrator privileges.

It was discovered that pecl_http incorrectly handled certain HTTP request parameters, leading to a type confusion. A remote attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service, or execute arbitrary code.

It was discovered that Babel incorrectly evaluated certain code during compilation when used with certain plugins. If a user or an automated system were tricked into compiling specially crafted code, an attacker could possibly use this issue to execute arbitrary code.

It was discovered that NetworkManager-ssh did not properly validate extra options in VPN connection settings. A local attacker could possibly use this issue to escalate privileges.

It was discovered that Logback incorrectly handled deserialization of untrusted data in its socket server and receiver components. A remote attacker could possibly use this issue to execute arbitrary code.

It was discovered that DAViCal did not properly encode certain request parameters, leading to a reflected cross-site scripting vulnerability. A remote attacker could possibly use this issue to perform actions as another user, including adding administrator accounts. (CVE-2019-18345) It was discovered that DAViCal did not protect against cross-site request forgery. A remote attacker could possibly use this issue to perform actions as an authenticated user, including adding administrator accounts. (CVE-2019-18346) It was discovered that DAViCal did not properly sanitize certain user account fields, leading to a stored cross-site scripting vulnerability. An authenticated user could possibly use this issue to execute arbitrary script in the browser of another user, including an administrator. (CVE-2019-18347)

FEDORA-2026-374f630522 Packages in this update:

• nebula-1.12.0-2.fc45

Update description:

Breaking

Building Nebula, or embedding it as a library, now requires go v1.27.3. (#1940, #2028) A firewall rule group that YAML reads as a float, a date, a map, or a nested array is now rejected on startup and reload instead of being quietly converted to a string, group: 1.10 used to match the group 1.1. A null group or groups is rejected when no host, other group, or cidr limits the rule, a null group used to match nothing. An unquoted int or bool, like group: 7, still works but logs a warning to quote it, since YAML has already turned a value like 007 into 7. (#1912, #2017) A pki.blocklist entry that isn't a hex SHA-256 fingerprint now refuses to start and fails a reload. Entries are now compared case insensitively. (#1964) On Linux, Nebula refuses a tun.dev that already exists, including a persistent device created ahead of time with ip tuntap add or systemd-networkd. Remove it and let Nebula create the device. (#1704) tun.mtu, and any route mtu, above 8937 is capped to 8937 with a warning so relayed packets always fit. (#1899) SSH debug server commands now exit with status 1 when they refuse, and with -json or -pretty report the refusal as {"ok":false,"reason":...}. version -json prints {"version":...} and print-cert -json -raw prints {"pem":...}. Every command accepts -json and -pretty. (#1959, #1975) nebula and nebula-service refuse to start when given an argument that isn't a flag instead of ignoring it. (#1975)

Embedders

Reload callbacks registered with config.C.RegisterReloadCallback now take (*config.C, *config.Reload), and ReloadConfig and ReloadConfigString return a config.ReloadResult. ReloadConfigString used to return an error, it is now the result's Err. (#1935) overlay.Device no longer embeds io.ReadWriteCloser and replaced NewMultiQueueReader and SupportsMultiqueue with Queues, reads and writes go through the tio.Queues it returns. udp.Conn gained WriteBatch, which must be safe for concurrent use, and IPv4Only, ListenOut takes a flush callback, and ReloadConfig takes a *config.Reload. udp.NewListener and udp.NewGenericListener take a udp.Settings. This only matters if you implement your own device or conn, or create the udp listener yourself. (#1704, #1935, #1971, #1991) The ssh debug commands moved to the new commands package. sshd.RegisterCommand and sshd.Command are gone and sshd.NewSSHServer takes a *commands.Registry. firewall.ProtoTCP, ProtoUDP, ProtoICMP and ProtoICMPv6 are now iputil.IPProtocol*. (#1958, #1864)

Added

Linux tun offloads (TSO/USO) and UDP GSO/GRO, off by default. Enable with tun.use_offloads and listen.udp_offloads. (#1704, #1858, #2023) Batch outbound UDP sends, up to 128 packets per sendmmsg call on Linux. (#1704) On Linux with routines above 1, pin each routine's thread to a CPU, preferring performance cores and spreading co-located instances apart. Controlled by tun.pin_threads (default true), tun.pin_threads_key (pid, the default, or port) and tun.cpu_affinity. These and listen.udp_offloads need a restart. (#1704, #1861) Native go FIPS 140-3 mode, no CGO required. make fips140 and make release-fips140 build binaries that only run in FIPS 140-only mode and only allow P256 certificates and AES. nebula-cert ca and keygen default to -curve P256 in those builds. Encrypted CA keys (nebula-cert ca -encrypt, or sign with an encrypted -ca-key) are not supported in them. The boringcrypto builds are deprecated and will be removed in the next release. (#1696) Local APIs under local_api. A control socket, on by default and only reachable by the user nebula runs as and root (SYSTEM and Administrators on Windows), or a group named in local_api.control.group, serves every ssh debug command, with nebula ctl <command> as its client. An opt-in info socket serves the new identity command over HTTP: GET /v1/identity for this node, GET /v1/identity/<vpn addr> for the host owning an address, and /pem under either for the certificate. When running more than one instance on a host give each its own local_api.control.socket, otherwise nebula ctl reaches whichever instance bound the default path first. (#1975, #1988) Experimental: a dns stanza that points the host's resolver at dns.nameservers, either for dns.match_domains (split DNS) or for every lookup (match_domains: []). Off by default, macOS and Windows only, and needs root on macOS or admin on Windows. With those privileges, Nebula clears any DNS settings left under its dns.identity (default nebula) when it starts, even without the stanza, so a host running more than one instance with dns enabled needs a distinct identity for each. Settings left by a crash stay until Nebula starts again with the same identity. (#2009, #2038)

Embedders

On macOS, hand Nebula a utun fd the host already configured with overlay.NewFdDeviceFromConfig, Nebula leaves its addressing, MTU and routes to the host. (#1890) localapi.Client.InvokeLine runs a control socket command line the way nebula ctl does. (#2025) config.C.GetStringSliceStrict reads a list and refuses a scalar where a list belongs. (#2009)

Changed

A config reload logs one line saying whether it completed, completed with errors, or needs a restart and for which keys. The reload debug command prints the same and fails when the reload had errors. A reload is now reported as failed when a config entry is skipped with a warning, or for a startup only value that would fail a restart, like an unknown cipher. (#1935, #1952, #1953) Certificates in pki.ca and pki.cert from a newer version of Nebula are skipped with a warning instead of failing startup. Nebula still fails if nothing usable is left. nebula-cert verify skips certificates in -ca and -crt it doesn't support with a warning, and fails if none are left. (#1999) Relay hosts batch the packets they forward. (#1971) A relay drops a relay request that names a different source than the peer that sent it. (#1980) Lighthouse queries never block the caller, a full queue drops the query and counts it in lighthouse.query.dropped. handshakes.query_buffer now defaults to 1024, up from 64. (#1910) static_host_map hostnames keep their last good addresses when a lookup fails, other than a not found answer, including across a reload, resolve in parallel, and re-resolve when a handshake to the host starts. static_map.lookup_timeout now defaults to 5s, up from 250ms. (#1982) tun.tx_queue now defaults to 5000, up from 500. (#1928) On macOS, the utun gets its vpn address as a /32 or /128 and Nebula routes the vpn network to it explicitly, so other VPNs can't take over the overlay route. (#1931) On macOS, an unsafe_routes entry another interface already routes is added once that route goes away and steps aside when it comes back, and the warning names the interface. This includes 0.0.0.0/0, which used to do nothing on a Mac and is now installed whenever the default route goes away, like when Wi-Fi drops. A reload restores an unsafe route deleted by hand. (#1925, #1942) On Windows, the nebula adapter no longer registers its addresses in DNS. (#1914) Quoted metric and via weight values in tun.unsafe_routes are now honored, a quoted metric used to become 0 and a quoted weight failed to load. Nebula warns when a route is listed more than once. (#1924) nebula-cert keygen refuses to overwrite an existing -out-key or -out-pub file, matching ca and sign. Overwriting kept the old file's mode, so a key written over a world-readable file stayed world-readable. Devices and fifos, like /dev/stdout, are still written to. (#1966, #2019) Reduce log spam from failing sends by logging them at most once a second, with a count of the ones skipped. (#1915) Reduce log spam from blocklisted hosts handshaking with us and invalid inbound packets by logging them at debug, blocklisted handshakes are counted in handshake_manager.rejected.blocklisted. (#1961, #1969, #1970) Lighthouses ignore host queries for their own overlay addresses. (#1866) IPv6 packets with more than 8 extension headers are now dropped. (#1704, #1883) Use about 10MB less memory by no longer linking gopacket outside of tests. (#1864) The fields logged when a reload refuses a certificate change are camelCase, old_networks is now oldNetworks, cert_version is now certVersion, and so on. (#2035) Various dependency updates. (#1827, #1828, #1829, #1846, #1847, #1859, #1860, #1875, #1876, #1894, #1904, #1937, #1938, #2015, #2016)

Removed

The SSH debug server's start-cpu-profile, stop-cpu-profile, save-heap-profile, save-mutex-profile, and mutex-profile-fraction commands, and sshd.sandbox_dir, which is now ignored if set. Profiling will return as a config option in a future release, see #913. (#1965)

Version:next-20261111 (linux-next) Released:2026-11-11

Multiple security issues were discovered in MySQL. MySQL has been updated to 8.4.13 in Ubuntu 26.04 LTS. Ubuntu 26.10 has been updated to MySQL 9.7.4. Ubuntu 22.04 LTS and Ubuntu 24.04 LTS packages have been updated with backported patches. In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes. Please see the following for more information: https://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-13.html https://dev.mysql.com/doc/relnotes/mysql/9.7/en/news-9-7-4.html https://www.oracle.com/security-alerts/cpuoct2026.html

FEDORA-2026-7a8986960b Packages in this update:

• libaec-1.1.8-1.fc43

Update description:

Version bump to v1.1.8

FEDORA-2026-74b55bb1ca Packages in this update:

• libaec-1.1.8-1.fc44

Update description:

Version bump to v1.1.8

FEDORA-2026-0fb2031f97 Packages in this update:

• freerdp-3.33.1-1.fc45

Update description:

Update to 3.33.1

Enable the XDG AAD authentication helper.

It was discovered that uutils coreutils mkfifo incorrectly continued processing when a target file already existed, applying default permissions to the existing file. A local attacker could possibly use this issue to obtain sensitive information or modify file permissions unexpectedly. (CVE-2026-35341) It was discovered that uutils coreutils dd incorrectly suppressed errors during file truncation operations. A local attacker could possibly use this issue to cause silent data corruption. (CVE-2026-35344) It was discovered that uutils coreutils tail incorrectly followed symbolic links when using the --follow=name option. A local attacker could possibly use this issue to obtain sensitive information. (CVE-2026-35345) It was discovered that uutils coreutils sort crashed when processing filenames containing non-UTF-8 bytes. A local attacker could possibly use this issue to cause a denial of service. (CVE-2026-35348) It was discovered that uutils coreutils cp incorrectly preserved setuid and setgid bits when ownership changes failed. A local attacker could possibly use this issue to gain elevated privileges. (CVE-2026-35350) It was discovered that uutils coreutils mv failed to preserve file ownership when moving files across file system boundaries. A local attacker could possibly use this issue to obtain sensitive information or cause unintended access restrictions. (CVE-2026-35351) It was discovered that uutils coreutils mv had a time-of-check to time-of-use race condition in its extended attribute preservation logic. A local attacker with write access to a directory could possibly use this issue to modify security labels on unintended files. (CVE-2026-35354) It was discovered that uutils coreutils cp had a race condition in its file creation logic, initially creating destination files with overly permissive modes. A local attacker could possibly use this issue to obtain sensitive information. (CVE-2026-35357) It was discovered that uutils coreutils cp had a time-of-check to time-of-use race condition when handling symbolic links. A local attacker with write access to a directory could possibly use this issue to obtain sensitive information. (CVE-2026-35359) It was discovered that uutils coreutils touch had a time-of-check to time-of-use race condition during file creation. A local attacker could possibly use this issue to cause data loss. (CVE-2026-35360) It was discovered that uutils coreutils rm failed to recognize trailing slashes on the current directory path. A local attacker could possibly use this issue to cause data loss. (CVE-2026-35363) It was discovered that uutils coreutils mv had a time-of-check to time-of-use race condition during cross-device operations. A local attacker with write access to a directory could possibly use this issue to overwrite arbitrary files. (CVE-2026-35364) It was discovered that uutils coreutils nohup created its output file with world-readable permissions. A local attacker could possibly use this issue to obtain sensitive information. (CVE-2026-35367) It was discovered that uutils coreutils chroot incorrectly resolved user specifications before dropping root privileges, allowing Name Service Switch modules to be loaded from the new root directory. A local attacker with write access to the chroot directory could possibly use this issue to execute arbitrary code as root. (CVE-2026-35368) It was discovered that uutils coreutils ln failed to process filenames containing non-UTF-8 bytes, causing the utility to exit with an error. A local attacker could possibly use this issue to cause a denial of service. (CVE-2026-35373) It was discovered that uutils coreutils split had a time-of-check to time-of-use race condition in its input and output file validation. A local attacker with write access to a directory could possibly use this issue to cause data loss. (CVE-2026-35374) It was discovered that uutils coreutils chcon had a time-of-check to time-of-use race condition during recursive relabeling operations. A local attacker with write access to a directory could possibly use this issue to modify security labels on unintended files. (CVE-2026-35376) It was discovered that uutils coreutils env incorrectly handled backslash sequences within single quotes when using the -S option. A local attacker could possibly use this issue to cause a denial of service. (CVE-2026-35377) It was discovered that uutils coreutils install applied setuid and setgid mode bits to destination files before completing ownership changes. A local attacker could possibly use this issue to gain elevated privileges. (CVE-2026-93658)

It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - NVDIMM (Non-Volatile Memory Device) drivers; - Handshake API; - ARM32 architecture; - MIPS architecture; - OpenRISC architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; - x86 architecture; - Cryptographic API; - Compute Acceleration Framework; - Intel NPU Driver; - ACPI drivers; - Android drivers; - Serial ATA and Parallel ATA drivers; - Drivers core; - DRBD Distributed Replicated Block Device drivers; - Rados block device (RBD) driver; - Ublk userspace block driver; - Bluetooth drivers; - Cdrom driver; - Character device driver; - TPM device driver; - Data acquisition framework and drivers; - Hardware crypto device drivers; - CXL (Compute Express Link) drivers; - DAX dirext access to differentiated memory framework; - DIBS (Direct Internal Buffer Sharing) drivers; - Buffer Sharing and Synchronization framework; - DMA engine subsystem; - DPLL subsystem; - EDAC drivers; - FireWire subsystem; - Arm Firmware Framework for ARMv8-A(FFA); - ARM SCMI message protocol; - Intel Stratix 10 firmware drivers; - FPGA Framework; - GPIB drivers; - GPIO subsystem; - GPU drivers; - HID subsystem; - Microsoft Hyper-V drivers; - Hardware monitoring drivers; - CoreSight HW tracing drivers; - Intel Trace Hub HW tracing drivers; - I2C subsystem; - I3C subsystem; - IIO subsystem; - IIO ADC drivers; - IIO Magnetometer sensors drivers; - InfiniBand drivers; - Input Device (Miscellaneous) drivers; - IOMMU subsystem; - IRQ chip drivers; - LED subsystem; - Mailbox framework; - Multiple devices driver; - Media drivers; - MemoryStick subsystem; - Multifunction device drivers; - Intel Management Engine Interface driver; - Amazon Nitro Secure Module driver; - MMC subsystem; - MTD block device drivers; - Network drivers; - Ethernet bonding driver; - Mellanox network drivers; - Microsoft Azure Network Adapter (MANA) driver; - Texas Instruments network drivers; - MediaTek network drivers; - NTB driver; - NVME drivers; - Device tree and open firmware driver; - Operating Performance Points (OPP) driver; - PCI subsystem; - Pin controllers subsystem; - x86 platform drivers; - i.MX PM domains; - MediaTek PM domains; - Power supply drivers; - PTP clock framework; - RapidIO drivers; - Voltage and Current Regulator drivers; - Remote Processor subsystem; - MPAM driver; - Reset controller framework; - Real Time Clock drivers; - S/390 drivers; - SCSI subsystem; - Xilinx SoC drivers; - SoundWire subsystem; - SPI subsystem; - Media staging drivers; - Media Oriented Systems Transport (MOST) driver; - NVIDIA Tegra embedded controller (NVEC) staging driver; - Realtek RTL8723BS SDIO drivers; - TCM subsystem; - TTY drivers; - UFS subsystem; - USB DSL drivers; - USB core drivers; - DesignWare USB3 driver; - USB Gadget drivers; - USB Host Controller drivers; - USB Dual Role (OTG-ready) Controller drivers; - USB Serial drivers; - vDPA drivers; - VFIO drivers; - Virtio Host (VHOST) subsystem; - Framebuffer layer; - Virtio drivers; - Watchdog drivers; - Xen hypervisor drivers; - 9P distributed file system; - AFS file system; - File systems infrastructure; - BTRFS file system; - Ceph distributed file system; - Ext4 file system; - F2FS file system; - FUSE (File system in Userspace); - Journaling layer for block devices (JBD2); - Network file systems library; - Network file system (NFS) client; - Network file system (NFS) server daemon; - NTFS3 file system; - OCFS2 file system; - OrangeFS file system; - Overlay file system; - Proc file system; - SMB network file system; - BPF subsystem; - File system encryption (fscrypt); - MAC80211 subsystem; - IPv4 networking; - Live Update Orchestrator (LUO); - Mellanox drivers; - Networking core; - Sun RPC protocol; - Memory Management; - Media input infrastructure; - IPv6 networking; - Bluetooth subsystem; - Wireless networking; - IP tunnels definitions; - Netfilter; - Network traffic control; - SCTP protocol; - TCP network protocol; - XFRM subsystem; - RDMA verbs API; - User-space API (UAPI); - Audit subsystem; - Control group (cgroup); - Kernel CPU control infrastructure; - Kernel exit() syscall; - Kernel fork() syscall; - Kexec HandOver (KHO); - Locking primitives; - Scheduler infrastructure; - Signal handling mechanism; - Timer subsystem; - Tracing infrastructure; - Codetag library; - Resizable hashtable library; - Memory management; - 9P file system network protocol; - Asynchronous Transfer Mode (ATM) subsystem; - B.A.T.M.A.N. meshing protocol; - Ethernet bridge; - CAN network layer; - Ceph Core library; - HSR network protocol; - IEEE802154.4 network protocol; - IFE protocol; - IUCV driver; - KCM (Kernel Connection Multiplexor) sockets driver; - Logical Link layer; - IEEE 802.15.4 subsystem; - MultiProtocol Label Switching driver; - Multipath TCP; - Open vSwitch; - Packet sockets; - Phonet protocol; - Packet sampling (psample); - Qualcomm IPC Router (QRTR); - RDS protocol; - RxRPC session sockets; - SMC sockets; - TIPC protocol; - TLS protocol; - X.25 network layer; - AppArmor security module; - Integrity Measurement Architecture(IMA) framework; - Landlock security; - SELinux security module; - ALSA framework; - HD-audio driver; - AMD SoC Alsa drivers; - Texas InstrumentS Audio (ASoC/HDA) drivers; - SoC Audio for Freescale CPUs drivers; - MediaTek ASoC drivers; - Amlogic Meson SoC drivers; - QCOM ASoC drivers; - SoundWire (SDCA) ASoC drivers; - SoC audio core drivers; - SOF drivers; - NVIDIA Tegra ASoC drivers; - USB sound devices; - Perf tools; - KVM subsystem; (CVE-2026-64349, CVE-2026-64530, CVE-2026-64532, CVE-2026-64533, CVE-2026-64534, CVE-2026-64535, CVE-2026-64537, CVE-2026-64538, CVE-2026-64539, CVE-2026-64540, CVE-2026-64541, CVE-2026-64542, CVE-2026-64543, CVE-2026-64544, CVE-2026-64545, CVE-2026-64546, CVE-2026-64547, CVE-2026-64548, CVE-2026-64549, CVE-2026-64550, CVE-2026-64551, CVE-2026-64552, CVE-2026-64553, CVE-2026-64554, CVE-2026-64555, CVE-2026-64557, CVE-2026-64558, CVE-2026-64559, CVE-2026-64560, CVE-2026-64561, CVE-2026-64562, CVE-2026-64563, CVE-2026-64564, CVE-2026-64565, CVE-2026-64566, CVE-2026-64567, CVE-2026-64568, CVE-2026-64569, CVE-2026-64570, CVE-2026-64571, CVE-2026-64572, CVE-2026-64573, CVE-2026-64574, CVE-2026-64575, CVE-2026-64576, CVE-2026-64577, CVE-2026-64578, CVE-2026-64579, CVE-2026-64580, CVE-2026-64581, CVE-2026-64582, CVE-2026-64583, CVE-2026-64584, CVE-2026-64585, CVE-2026-64586, CVE-2026-68081, CVE-2026-68082, CVE-2026-68083, CVE-2026-68093, CVE-2026-68095, CVE-2026-68096, CVE-2026-68097, CVE-2026-68098, CVE-2026-68099, CVE-2026-68100, CVE-2026-68104, CVE-2026-68105, CVE-2026-68106, CVE-2026-68107, CVE-2026-68108, CVE-2026-68109, CVE-2026-68110, CVE-2026-68111, CVE-2026-68112, CVE-2026-68113, CVE-2026-68114, CVE-2026-68115, CVE-2026-68116, CVE-2026-68117, CVE-2026-68118, CVE-2026-68119, CVE-2026-68120, CVE-2026-68121, CVE-2026-68122, CVE-2026-68123, CVE-2026-68124, CVE-2026-68125, CVE-2026-68126, CVE-2026-68127, CVE-2026-68128, CVE-2026-68129, CVE-2026-68130, CVE-2026-68131, CVE-2026-68132, CVE-2026-68133, CVE-2026-68134, CVE-2026-68135, CVE-2026-68136, CVE-2026-68137, CVE-2026-68138, CVE-2026-68139, CVE-2026-68140, CVE-2026-68141, CVE-2026-68142, CVE-2026-68143, CVE-2026-68144, CVE-2026-68145, CVE-2026-68146, CVE-2026-68147, CVE-2026-68148, CVE-2026-68149, CVE-2026-68150, CVE-2026-68151, CVE-2026-68152, CVE-2026-68153, CVE-2026-68154, CVE-2026-68155, CVE-2026-68156, CVE-2026-68157, CVE-2026-68158, CVE-2026-68159, CVE-2026-68160, CVE-2026-68161, CVE-2026-68162, CVE-2026-68163, CVE-2026-68164, CVE-2026-68165, CVE-2026-68166, CVE-2026-68168, CVE-2026-68169, CVE-2026-68170, CVE-2026-68172, CVE-2026-68173, CVE-2026-68174, CVE-2026-68175, CVE-2026-68176, CVE-2026-68177, CVE-2026-68178, CVE-2026-68179, CVE-2026-68180, CVE-2026-68181, CVE-2026-68182, CVE-2026-68183, CVE-2026-68184, CVE-2026-68186, CVE-2026-68187, CVE-2026-68188, CVE-2026-68189, CVE-2026-68190, CVE-2026-68191, CVE-2026-68192, CVE-2026-68193, CVE-2026-68194, CVE-2026-68195, CVE-2026-68196, CVE-2026-68197, CVE-2026-68198, CVE-2026-68199, CVE-2026-68200, CVE-2026-68201, CVE-2026-68202, CVE-2026-68203, CVE-2026-68204, CVE-2026-68205, CVE-2026-68206, CVE-2026-68207, CVE-2026-68208, CVE-2026-68209, CVE-2026-68210, CVE-2026-68211, CVE-2026-68212, CVE-2026-68213, CVE-2026-68214, CVE-2026-68215, CVE-2026-68216, CVE-2026-68217, CVE-2026-68218, CVE-2026-68219, CVE-2026-68220, CVE-2026-68221, CVE-2026-68222, CVE-2026-68223, CVE-2026-68224, CVE-2026-68225, CVE-2026-68226, CVE-2026-68227, CVE-2026-68228, CVE-2026-68229, CVE-2026-68230, CVE-2026-68231, CVE-2026-68232, CVE-2026-68233, CVE-2026-68234, CVE-2026-68235, CVE-2026-68236, CVE-2026-68237, CVE-2026-68238, CVE-2026-68239, CVE-2026-68240, CVE-2026-68241, CVE-2026-68242, CVE-2026-68243, CVE-2026-68244, CVE-2026-68245, CVE-2026-68246, CVE-2026-68247, CVE-2026-68248, CVE-2026-68249, CVE-2026-68250, CVE-2026-68251, CVE-2026-68252, CVE-2026-68253, CVE-2026-68254, CVE-2026-68255, CVE-2026-68256, CVE-2026-68257, CVE-2026-68258, CVE-2026-68259, CVE-2026-68260, CVE-2026-68261, CVE-2026-68262, CVE-2026-68263, CVE-2026-68264, CVE-2026-68265, CVE-2026-68266, CVE-2026-68267, CVE-2026-68268, CVE-2026-68269, CVE-2026-68270, CVE-2026-68271, CVE-2026-68272, CVE-2026-68273, CVE-2026-68274, CVE-2026-68275, CVE-2026-68276, CVE-2026-68277, CVE-2026-68278, CVE-2026-68279, CVE-2026-68280, CVE-2026-68281, CVE-2026-68282, CVE-2026-68283, CVE-2026-68284, CVE-2026-68286, CVE-2026-68287, CVE-2026-68288, CVE-2026-68289, CVE-2026-68290, CVE-2026-68291, CVE-2026-68292, CVE-2026-68293, CVE-2026-68294, CVE-2026-68296, CVE-2026-68297, CVE-2026-68298, CVE-2026-68299, CVE-2026-68300, CVE-2026-68301, CVE-2026-68302, CVE-2026-68303, CVE-2026-68304, CVE-2026-68306, CVE-2026-68307, CVE-2026-68308, CVE-2026-68309, CVE-2026-68310, CVE-2026-68311, CVE-2026-68312, CVE-2026-68313, CVE-2026-68314, CVE-2026-68315, CVE-2026-68316, CVE-2026-68317, CVE-2026-68318, CVE-2026-68319, CVE-2026-68320, CVE-2026-68321, CVE-2026-68322, CVE-2026-68323, CVE-2026-68324, CVE-2026-68325, CVE-2026-68326, CVE-2026-68327, CVE-2026-68328, CVE-2026-68329, CVE-2026-68330, CVE-2026-68331, CVE-2026-68332, CVE-2026-68333, CVE-2026-68334, CVE-2026-68335, CVE-2026-68336, CVE-2026-68337, CVE-2026-68338, CVE-2026-68339, CVE-2026-68340, CVE-2026-68341, CVE-2026-68342, CVE-2026-68343, CVE-2026-68345, CVE-2026-68346, CVE-2026-68347, CVE-2026-68348, CVE-2026-68349, CVE-2026-68350, CVE-2026-68351, CVE-2026-68352, CVE-2026-68353, CVE-2026-68354, CVE-2026-68355, CVE-2026-68356, CVE-2026-68357, CVE-2026-68358, CVE-2026-68359, CVE-2026-68360, CVE-2026-68361, CVE-2026-68362, CVE-2026-68363, CVE-2026-68364, CVE-2026-68365, CVE-2026-68366, CVE-2026-68367, CVE-2026-68368, CVE-2026-68369, CVE-2026-68370, CVE-2026-68371, CVE-2026-68372, CVE-2026-68373, CVE-2026-68374, CVE-2026-68375, CVE-2026-68376, CVE-2026-68377, CVE-2026-68378, CVE-2026-68379, CVE-2026-68380, CVE-2026-68381, CVE-2026-68382, CVE-2026-68383, CVE-2026-68384, CVE-2026-68385, CVE-2026-68386, CVE-2026-68387, CVE-2026-68388, CVE-2026-68389, CVE-2026-68390, CVE-2026-68391, CVE-2026-68392, CVE-2026-68393, CVE-2026-68394, CVE-2026-68395, CVE-2026-68396, CVE-2026-68397, CVE-2026-68398, CVE-2026-68399, CVE-2026-68400, CVE-2026-68401, CVE-2026-68402, CVE-2026-68403, CVE-2026-68404, CVE-2026-68405, CVE-2026-68406, CVE-2026-68407, CVE-2026-68408, CVE-2026-68409, CVE-2026-68410, CVE-2026-68411, CVE-2026-68412, CVE-2026-68413, CVE-2026-68414, CVE-2026-68415, CVE-2026-68416, CVE-2026-68417, CVE-2026-68418, CVE-2026-68419, CVE-2026-68420, CVE-2026-68421, CVE-2026-68422, CVE-2026-68425, CVE-2026-68426, CVE-2026-68427, CVE-2026-68428, CVE-2026-68429, CVE-2026-68430, CVE-2026-68431, CVE-2026-68432, CVE-2026-68433, CVE-2026-68434, CVE-2026-68436, CVE-2026-68437, CVE-2026-68439, CVE-2026-68440, CVE-2026-68441, CVE-2026-68442, CVE-2026-68443, CVE-2026-68444, CVE-2026-68445, CVE-2026-68446, CVE-2026-68447, CVE-2026-68448, CVE-2026-68449, CVE-2026-68450, CVE-2026-68454, CVE-2026-68455, CVE-2026-68456, CVE-2026-68457, CVE-2026-68458, CVE-2026-68463, CVE-2026-68464, CVE-2026-68465, CVE-2026-68466, CVE-2026-68467, CVE-2026-68469, CVE-2026-68470, CVE-2026-68471, CVE-2026-68472, CVE-2026-68473, CVE-2026-68474, CVE-2026-68475, CVE-2026-68476, CVE-2026-68477, CVE-2026-68478, CVE-2026-68479, CVE-2026-68480, CVE-2026-72003, CVE-2026-72004, CVE-2026-72005, CVE-2026-72006, CVE-2026-72007, CVE-2026-72008, CVE-2026-72009, CVE-2026-72010, CVE-2026-72011, CVE-2026-72012, CVE-2026-72013, CVE-2026-72014, CVE-2026-72015, CVE-2026-72016, CVE-2026-72017, CVE-2026-72018, CVE-2026-72019, CVE-2026-72020, CVE-2026-72021, CVE-2026-72022, CVE-2026-72023, CVE-2026-72024, CVE-2026-72025, CVE-2026-72026, CVE-2026-72027, CVE-2026-72028, CVE-2026-72029, CVE-2026-72030, CVE-2026-72031, CVE-2026-72032, CVE-2026-72033, CVE-2026-72034, CVE-2026-72035, CVE-2026-72036, CVE-2026-72037, CVE-2026-72038, CVE-2026-72039, CVE-2026-72040, CVE-2026-72041, CVE-2026-72042, CVE-2026-72045, CVE-2026-72046, CVE-2026-72047, CVE-2026-72048, CVE-2026-72049, CVE-2026-72050, CVE-2026-72051, CVE-2026-72052, CVE-2026-72053, CVE-2026-72054, CVE-2026-72055, CVE-2026-72056, CVE-2026-72057, CVE-2026-72058, CVE-2026-72059, CVE-2026-72060, CVE-2026-72061, CVE-2026-72062, CVE-2026-72063, CVE-2026-72064, CVE-2026-72065, CVE-2026-72066, CVE-2026-72067, CVE-2026-72068, CVE-2026-72069, CVE-2026-72070, CVE-2026-72071, CVE-2026-72072, CVE-2026-72073, CVE-2026-72074, CVE-2026-72075, CVE-2026-72076, CVE-2026-72077, CVE-2026-72078, CVE-2026-72079, CVE-2026-72080, CVE-2026-72081, CVE-2026-72082, CVE-2026-72083, CVE-2026-72084, CVE-2026-72085, CVE-2026-72086, CVE-2026-72087, CVE-2026-72088, CVE-2026-72089, CVE-2026-72090, CVE-2026-72091, CVE-2026-72092, CVE-2026-72093, CVE-2026-72095, CVE-2026-72096, CVE-2026-72097, CVE-2026-72098, CVE-2026-72099, CVE-2026-72100, CVE-2026-72101, CVE-2026-72102, CVE-2026-72103, CVE-2026-72104, CVE-2026-72105, CVE-2026-72106, CVE-2026-72107, CVE-2026-72108, CVE-2026-72109, CVE-2026-72110, CVE-2026-72111, CVE-2026-72113, CVE-2026-72114, CVE-2026-72115, CVE-2026-72116, CVE-2026-72117, CVE-2026-72118, CVE-2026-72119, CVE-2026-72120, CVE-2026-72121, CVE-2026-72122, CVE-2026-72123, CVE-2026-72124, CVE-2026-72125, CVE-2026-72126, CVE-2026-72127, CVE-2026-72128, CVE-2026-72129, CVE-2026-72130, CVE-2026-72131, CVE-2026-72132, CVE-2026-72133, CVE-2026-72134, CVE-2026-72135, CVE-2026-72136, CVE-2026-72137, CVE-2026-72138, CVE-2026-72139, CVE-2026-72140, CVE-2026-72141, CVE-2026-72142, CVE-2026-72143, CVE-2026-72144, CVE-2026-72146, CVE-2026-72147, CVE-2026-72148, CVE-2026-72149, CVE-2026-72150, CVE-2026-72151, CVE-2026-72152, CVE-2026-72153, CVE-2026-72154, CVE-2026-72155, CVE-2026-72156, CVE-2026-72157, CVE-2026-72158, CVE-2026-72159, CVE-2026-72160, CVE-2026-72161, CVE-2026-72162, CVE-2026-72163, CVE-2026-72164, CVE-2026-72165, CVE-2026-72166, CVE-2026-72167, CVE-2026-72168, CVE-2026-72169, CVE-2026-72170, CVE-2026-72171, CVE-2026-72172, CVE-2026-72173, CVE-2026-72174, CVE-2026-72175, CVE-2026-72176, CVE-2026-72177, CVE-2026-72178, CVE-2026-72179, CVE-2026-72180, CVE-2026-72181, CVE-2026-72182, CVE-2026-72183, CVE-2026-72191, CVE-2026-72192, CVE-2026-72193, CVE-2026-72194, CVE-2026-72195, CVE-2026-72196, CVE-2026-72197, CVE-2026-72212, CVE-2026-72213, CVE-2026-72214, CVE-2026-72215, CVE-2026-72216, CVE-2026-72217, CVE-2026-72218, CVE-2026-72219, CVE-2026-72220, CVE-2026-72221, CVE-2026-72222, CVE-2026-72223, CVE-2026-72224, CVE-2026-72225, CVE-2026-72226, CVE-2026-72227, CVE-2026-72228, CVE-2026-72229, CVE-2026-72230, CVE-2026-72231, CVE-2026-72232, CVE-2026-72233, CVE-2026-72234, CVE-2026-72235, CVE-2026-72236, CVE-2026-72237, CVE-2026-72238, CVE-2026-72240, CVE-2026-72241, CVE-2026-72242, CVE-2026-72243, CVE-2026-72244, CVE-2026-72245, CVE-2026-72247, CVE-2026-72248, CVE-2026-72249, CVE-2026-72250, CVE-2026-72251, CVE-2026-72252, CVE-2026-72253, CVE-2026-72254, CVE-2026-72255, CVE-2026-72256, CVE-2026-72257, CVE-2026-72258, CVE-2026-72259, CVE-2026-72260, CVE-2026-72261, CVE-2026-72262, CVE-2026-72263, CVE-2026-72264, CVE-2026-72265, CVE-2026-72266, CVE-2026-72267, CVE-2026-72268, CVE-2026-72269, CVE-2026-72270, CVE-2026-72271, CVE-2026-72272, CVE-2026-72273, CVE-2026-72274, CVE-2026-72275, CVE-2026-72276, CVE-2026-72277, CVE-2026-72278, CVE-2026-72279, CVE-2026-72280, CVE-2026-72282, CVE-2026-72283, CVE-2026-72284, CVE-2026-72285, CVE-2026-72286, CVE-2026-72287, CVE-2026-72288, CVE-2026-72289, CVE-2026-72290, CVE-2026-72292, CVE-2026-72293, CVE-2026-72296, CVE-2026-72297, CVE-2026-72298, CVE-2026-72299, CVE-2026-72300, CVE-2026-72301, CVE-2026-72302, CVE-2026-72303, CVE-2026-72304, CVE-2026-72305, CVE-2026-72306, CVE-2026-72307, CVE-2026-72308, CVE-2026-72310, CVE-2026-72312, CVE-2026-72313, CVE-2026-72314, CVE-2026-72315, CVE-2026-72316, CVE-2026-72317, CVE-2026-72318, CVE-2026-72319, CVE-2026-72320, CVE-2026-72321, CVE-2026-72322, CVE-2026-72323, CVE-2026-72324, CVE-2026-72325, CVE-2026-72326, CVE-2026-72327, CVE-2026-72328, CVE-2026-72329, CVE-2026-72330, CVE-2026-72331, CVE-2026-72332, CVE-2026-72333, CVE-2026-72334, CVE-2026-72335, CVE-2026-72336, CVE-2026-72337, CVE-2026-72338, CVE-2026-72339, CVE-2026-72340, CVE-2026-72341, CVE-2026-72342, CVE-2026-72343, CVE-2026-72345, CVE-2026-72347, CVE-2026-72348, CVE-2026-72349, CVE-2026-72350, CVE-2026-72351, CVE-2026-72352, CVE-2026-72355, CVE-2026-72356, CVE-2026-72357, CVE-2026-72360, CVE-2026-72361, CVE-2026-72362, CVE-2026-72363, CVE-2026-72364, CVE-2026-72365, CVE-2026-72366, CVE-2026-72367, CVE-2026-72368, CVE-2026-72369, CVE-2026-72370, CVE-2026-72371, CVE-2026-72372, CVE-2026-72373, CVE-2026-72374, CVE-2026-72375, CVE-2026-72376, CVE-2026-72377, CVE-2026-72378, CVE-2026-72379, CVE-2026-72380, CVE-2026-72381, CVE-2026-72382, CVE-2026-72383, CVE-2026-72384, CVE-2026-72385, CVE-2026-72386, CVE-2026-72387, CVE-2026-72388, CVE-2026-72389, CVE-2026-72390, CVE-2026-72391, CVE-2026-72392, CVE-2026-72393, CVE-2026-72394, CVE-2026-72395, CVE-2026-72396, CVE-2026-72397, CVE-2026-72398, CVE-2026-72399, CVE-2026-72400, CVE-2026-72401, CVE-2026-72402, CVE-2026-72403, CVE-2026-72405, CVE-2026-72406, CVE-2026-72407, CVE-2026-72408, CVE-2026-72409, CVE-2026-72410, CVE-2026-72412, CVE-2026-72413, CVE-2026-72414, CVE-2026-72415, CVE-2026-72416, CVE-2026-72417, CVE-2026-72418, CVE-2026-72419, CVE-2026-72420, CVE-2026-72421, CVE-2026-72422, CVE-2026-72423, CVE-2026-72424, CVE-2026-72425, CVE-2026-72427, CVE-2026-72428, CVE-2026-72429, CVE-2026-72430, CVE-2026-72431, CVE-2026-72433, CVE-2026-72434, CVE-2026-72435, CVE-2026-72436, CVE-2026-72437, CVE-2026-72438, CVE-2026-72439, CVE-2026-72440, CVE-2026-72441, CVE-2026-72442, CVE-2026-72443, CVE-2026-72444, CVE-2026-72445, CVE-2026-72446, CVE-2026-72447, CVE-2026-72448, CVE-2026-72449, CVE-2026-72450, CVE-2026-72451, CVE-2026-72452, CVE-2026-72453, CVE-2026-72454, CVE-2026-72455, CVE-2026-72456, CVE-2026-72457, CVE-2026-72458, CVE-2026-72459, CVE-2026-72460, CVE-2026-72461, CVE-2026-72462, CVE-2026-72463, CVE-2026-72464, CVE-2026-72466, CVE-2026-72467, CVE-2026-72468, CVE-2026-72469, CVE-2026-72470, CVE-2026-72471, CVE-2026-72472, CVE-2026-72473, CVE-2026-72474, CVE-2026-72475, CVE-2026-72476, CVE-2026-72477, CVE-2026-72478, CVE-2026-72479, CVE-2026-72480, CVE-2026-72481, CVE-2026-72482, CVE-2026-72483, CVE-2026-72484, CVE-2026-72485, CVE-2026-72486, CVE-2026-72487, CVE-2026-72488, CVE-2026-72489, CVE-2026-72491, CVE-2026-72492, CVE-2026-72493, CVE-2026-72494, CVE-2026-72495, CVE-2026-72496, CVE-2026-72498, CVE-2026-72499, CVE-2026-72500, CVE-2026-72501, CVE-2026-72502, CVE-2026-74255, CVE-2026-74256, CVE-2026-74257, CVE-2026-74258, CVE-2026-74260, CVE-2026-74261, CVE-2026-74262, CVE-2026-74263, CVE-2026-74264, CVE-2026-74265, CVE-2026-74266, CVE-2026-74267, CVE-2026-74268, CVE-2026-74269, CVE-2026-74270, CVE-2026-74271, CVE-2026-74272, CVE-2026-74273, CVE-2026-74274, CVE-2026-74276, CVE-2026-74277, CVE-2026-74278, CVE-2026-74279, CVE-2026-74280, CVE-2026-74281, CVE-2026-74282, CVE-2026-74283, CVE-2026-74284, CVE-2026-74286, CVE-2026-74287, CVE-2026-74288, CVE-2026-74289, CVE-2026-74290, CVE-2026-74291, CVE-2026-74292, CVE-2026-74293, CVE-2026-74294, CVE-2026-74295, CVE-2026-74296, CVE-2026-74297, CVE-2026-74300, CVE-2026-74301, CVE-2026-74302, CVE-2026-74303, CVE-2026-74304, CVE-2026-74305, CVE-2026-74306, CVE-2026-74307, CVE-2026-74308, CVE-2026-74309, CVE-2026-74310, CVE-2026-74311, CVE-2026-74312, CVE-2026-74313, CVE-2026-74314, CVE-2026-74316, CVE-2026-74317, CVE-2026-74318, CVE-2026-74320, CVE-2026-74321, CVE-2026-74322, CVE-2026-74323, CVE-2026-74324, CVE-2026-74325, CVE-2026-74327, CVE-2026-74328, CVE-2026-74329, CVE-2026-74330, CVE-2026-74331, CVE-2026-74332, CVE-2026-74333, CVE-2026-74334, CVE-2026-74335, CVE-2026-74336, CVE-2026-74337, CVE-2026-74338, CVE-2026-74339, CVE-2026-74340, CVE-2026-74341, CVE-2026-74344, CVE-2026-74345, CVE-2026-74346, CVE-2026-74347, CVE-2026-74348, CVE-2026-74349, CVE-2026-74350, CVE-2026-74351, CVE-2026-74352, CVE-2026-74353, CVE-2026-74354, CVE-2026-74355, CVE-2026-74356, CVE-2026-74358, CVE-2026-74359, CVE-2026-74360, CVE-2026-74361, CVE-2026-74362, CVE-2026-74363, CVE-2026-74364, CVE-2026-74365, CVE-2026-74366, CVE-2026-74367, CVE-2026-74368, CVE-2026-74370, CVE-2026-74371, CVE-2026-74372, CVE-2026-74373, CVE-2026-74374, CVE-2026-74375, CVE-2026-74376, CVE-2026-74377, CVE-2026-74378, CVE-2026-74379, CVE-2026-74380, CVE-2026-74381, CVE-2026-74382, CVE-2026-74383, CVE-2026-74384, CVE-2026-74385, CVE-2026-74386, CVE-2026-74387, CVE-2026-74388, CVE-2026-74389, CVE-2026-74390, CVE-2026-74391, CVE-2026-74392, CVE-2026-74393, CVE-2026-74394, CVE-2026-74395, CVE-2026-74396, CVE-2026-74397, CVE-2026-74398, CVE-2026-74399, CVE-2026-74400, CVE-2026-74401, CVE-2026-74402, CVE-2026-74403, CVE-2026-74404, CVE-2026-74405, CVE-2026-74406, CVE-2026-74407, CVE-2026-74408, CVE-2026-74409, CVE-2026-74410, CVE-2026-74411, CVE-2026-74412, CVE-2026-74413, CVE-2026-74415, CVE-2026-74416, CVE-2026-74417, CVE-2026-74419, CVE-2026-74420, CVE-2026-74421, CVE-2026-74422, CVE-2026-74423, CVE-2026-74424, CVE-2026-74425, CVE-2026-74426, CVE-2026-74427, CVE-2026-74428, CVE-2026-74429, CVE-2026-74430, CVE-2026-74431, CVE-2026-74432, CVE-2026-74433, CVE-2026-74434, CVE-2026-74435, CVE-2026-74436, CVE-2026-74437, CVE-2026-74438, CVE-2026-74439, CVE-2026-80592, CVE-2026-80593, CVE-2026-80594, CVE-2026-80595, CVE-2026-80596, CVE-2026-80597, CVE-2026-80598, CVE-2026-80599, CVE-2026-80600, CVE-2026-80601, CVE-2026-80602, CVE-2026-80603, CVE-2026-80604, CVE-2026-80605, CVE-2026-80606, CVE-2026-80607, CVE-2026-80609, CVE-2026-80610, CVE-2026-80611, CVE-2026-80612, CVE-2026-80613, CVE-2026-80614, CVE-2026-80615, CVE-2026-80616, CVE-2026-80617, CVE-2026-80618, CVE-2026-80619, CVE-2026-80620, CVE-2026-80621, CVE-2026-80622, CVE-2026-80623, CVE-2026-80624, CVE-2026-80625, CVE-2026-80626, CVE-2026-80627, CVE-2026-80628, CVE-2026-80629, CVE-2026-80630, CVE-2026-80631, CVE-2026-80634, CVE-2026-80635, CVE-2026-80636, CVE-2026-80637, CVE-2026-80638, CVE-2026-80639, CVE-2026-80640, CVE-2026-80641, CVE-2026-80642, CVE-2026-80643, CVE-2026-80644, CVE-2026-80645, CVE-2026-80646, CVE-2026-80647, CVE-2026-80648, CVE-2026-80649, CVE-2026-80650, CVE-2026-80651, CVE-2026-80652, CVE-2026-80653, CVE-2026-80654, CVE-2026-80655, CVE-2026-80657, CVE-2026-80658, CVE-2026-80659, CVE-2026-80660, CVE-2026-80661, CVE-2026-80662, CVE-2026-80663, CVE-2026-80664, CVE-2026-80665, CVE-2026-80666, CVE-2026-80667, CVE-2026-80668, CVE-2026-80669, CVE-2026-80670, CVE-2026-80671, CVE-2026-80675, CVE-2026-80676, CVE-2026-80677, CVE-2026-80865, CVE-2026-80866, CVE-2026-80867, CVE-2026-80868, CVE-2026-80870, CVE-2026-80871, CVE-2026-80872, CVE-2026-80873, CVE-2026-80874, CVE-2026-80875, CVE-2026-80876, CVE-2026-80877, CVE-2026-80878, CVE-2026-80879, CVE-2026-80880, CVE-2026-80881, CVE-2026-80882, CVE-2026-80883, CVE-2026-80884, CVE-2026-80885, CVE-2026-80886, CVE-2026-89774, CVE-2026-92502, CVE-2026-98432)