Search: 13.3-13

JobOps versions up to and including 0.13.1 contain a server-side request forgery (SSRF) vulnerability in the POST /api/manual-jobs/fetch endpoint. This flaw allows authenticated users, or unauthenticated clients in demo mode, to make the server request internal network resources, including loopback, private IP addresses, or cloud metadata endpoints. Exploitation can lead to disclosure of internal service data and instance metadata.

### Summary When generating a support bundle with `talosctl support` the credentials entered for private registries are included in the bundle. ### Details Within the generated support bundle, inside `resources/registryconfigs.cri.talos.dev.yaml` the `auth` field of the spec is retained. The same, potentially sensitive information is present within `etcfilespecs.files.talos.dev.yaml`. ### PoC Simply run `talosctl -n [...] support` on a cluster with a `RegistryAuthConfig` resource ### Impact The problem itself is minor, however, anyone who has ever uploaded a support.zip bundle on a github issue, slack thread or public forum could have potentially leaked their internal authentication parameters for a private registry. In most situations, if the network and credentials are set correctly, this should not be a problem. On the other hand, if the affected registry is publicly accessible, and the provided credentials have write access to it, this could lead to possibly serious consequences, from denial of service, to data loss and possibly existing tag hijacking leading to supply chain compromise, for the affected parties which were under the impression that the support bundle is redacted of sensitive information and thus can be shared publicly. ### Notes Talos 1.14+ by default encrypts the support bundle to the age recipients specified (defaulting to siderolabs GitHub org members), so the impact is even lower. ### Environment - Talos version: v1.13.0 - Kubernetes version: 1.35.3 - Platform: amd64

AdPlug versions through 2.4 have a heap out-of-bounds read vulnerability in the CdmoLoader::load() function within src/dmo.cpp. This flaw allows attackers to read memory beyond a heap allocation by supplying a truncated TwinTeam DMO file. Specifically, a crafted 12- or 13-byte file can bypass dmo_unpacker::decrypt() and cause the application to read past the packed_module buffer, potentially crashing the application.

An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch. Under specific circumstances, an attacker could potentially leverage this to retrieve unauthorized secrets, alter administrative access controls on the branch or cause a denial of service (DoS). Idira Security Bulletin CA26-38.

CVE-2026-111142 is an out-of-bounds read vulnerability in gdraheim zziplib versions up to 0.13.80. The flaw exists in zzip/mmapped.c and allows an attacker to craft a malicious ZIP central directory that causes the library to read beyond the allocated heap buffer. This can lead to application crashes due to memory over-read.

zziplib through 0.13.80 contains an out-of-bounds read vulnerability in __zzip_parse_root_directory() in zzip/zip.c that allows attackers to read past the mapped central directory in mmap builds due to an ineffective bounds check. Attackers can supply a crafted ZIP whose entry name ends at the central directory end, triggering 28-byte ZIP64 extra field over-reads via zzip_dir_open() that crash the process.

CVE-2026-105660 is a vulnerability in mtrudel bandit versions from 0.6.0 up to but not including 1.13.0. It involves improper validation of the syntactic correctness of input in HTTP request targets, allowing an unauthenticated remote attacker to set conn.host and conn.port to values outside the RFC 3986 host grammar. This can lead to applications generating URLs with attacker-chosen authority components. The vulnerability does not affect message framing and does not allow control characters like CR or LF in conn.host.

FasterXML Jackson 1.x versions, including jackson-mapper-asl 1.8.3, 1.9.2, 1.9.11, 1.9.12, and 1.9.13, contain a vulnerability that allows denial of service (DoS) attacks. This occurs when an attacker supplies deeply nested JSON input to an application that deserializes untrusted JSON using ObjectMapper.readValue. The vulnerability has a high severity rating with a CVSS score of 7.5.

Red Hat OpenShift Data Foundation 4.17.28 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-9380: [Backport to odf-4.17.z] Backport CA related fixes for NooBaa DFBUGS-7336: [Backport to odf-4.17.z] [5.20] Update nodejs from v22.11.0 to v24.13.0 DFBUGS-7106: [Backport to 4.17.z] CLONE - ODF Console is breaking DFBUGS-7065: RHODF 4.17.28 release DFBUGS-6744: Backport to odf-4.17.z ODF 4.16.21- noobaa-endpoint crashes with Exit Code 1 due to unhandled AbortError from @azure/storage-blob

Red Hat OpenShift Data Foundation 4.16.36 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-9792: Use Azure Storage Account GPv2 DFBUGS-9382: [Backport to odf-4.16.z] [Backport to 4.22] Backport CA related fixes for NooBaa DFBUGS-7335: [Backport to odf-4.16.z] [5.20] Update nodejs from v22.11.0 to v24.13.0 DFBUGS-7030: [Backport to odf-4.16.z] [GSS] noobaa DB grows with errors BlockStoreAzure _delete_blocks failed for block

Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the container images for Red Hat OpenShift Container Platform 4.13.72. See the following advisory for the RPM packages for this release: https://access.redhat.com/errata/RHSA-2026:77319 Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes: https://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html/release_notes Security Fix(es): None For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. All OpenShift Container Platform 4.13 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html-single/updating_clusters/index#updating-cluster-within-minor.

Microsoft announced that Windows Server 2022 reached the end of mainstream support as of October 13, 2026. The product will continue to receive extended support, including security updates, until October 14, 2031. Hotpatching support for the Datacenter: Azure Edition will continue until October 2027. Microsoft recommends upgrading to Windows Server 2025, which offers full mainstream support and will be supported until November 2034. This announcement also includes related end-of-support notices for Windows 11 versions.

CVE-2026-109892 is a critical vulnerability in Frontend Admin by DynamiApps (Shabti Kaplan) that allows incorrect privilege assignment leading to privilege escalation. It affects versions from 0 up to and including 3.29.13. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability.

Microsoft fixed a known issue causing black screens, desktop loading problems, and Windows Explorer crashes after installing Windows 11 updates released since August 2026. The problem primarily affected Azure Virtual Desktop hosts using FSLogix for profile management. Microsoft released cumulative updates on October 13, 2026, that resolve the issue. A temporary workaround involves manually launching Windows Explorer via Task Manager. Enterprise customers can also apply Known Issue Rollback group policies to mitigate the problem until the update is installed.

Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.13.72. See the following advisory for the container images for this release: https://access.redhat.com/errata/RHSA-2026:77321 Security Fix(es): None For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. All OpenShift Container Platform 4.13 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html-single/updating_clusters/index#updating-cluster-within-minor.

Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the container images for Red Hat OpenShift Container Platform 4.13.72. See the following advisory for the RPM packages for this release: https://access.redhat.com/errata/RHSA-2026:77319 Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes: https://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html/release_notes

The Post and Page Builder by BoldGrid WordPress plugin (up to version 1.27.13) contains a stored cross-site scripting (XSS) vulnerability in the Table Designer's 'data-label' attribute. Authenticated users with Contributor-level access or higher can inject malicious scripts that execute when other users view the affected pages. This vulnerability arises from insufficient input sanitization and output escaping.

Multiple vulnerabilities were discovered in PyJWT affecting key validation and handling, potentially allowing attackers to forge authentication tokens or disclose sensitive information. These issues involve improper validation of JWK keys during HMAC verification, incorrect handling of redirects when fetching key sets, and improper recognition of certain PEM and DER public key formats. The vulnerabilities affect PyJWT versions prior to 2.13.0-1ubuntu1 and specific listed versions. Ubuntu has released a fixed package version 2.13.0-1ubuntu1 to address these issues.