Search: 13.3-13

Bulletin ID: 2026-054-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 07/14/2026 13:00 PM PDT Description: AWS HealthLake MCP Server (awslabs.healthlake-mcp-server) is a Model Context Protocol server that enables AI assistants to interact with AWS HealthLake FHIR datastores. We identified CVE-2026-15643, a server-side request forgery in the pagination handling component in AWS awslabs.healthlake-mcp-server before 0.0.14 on all platforms might allow a remote authenticated user to exfiltrate AWS temporary security credentials to an arbitrary endpoint via a crafted next_token parameter. The server does not validate that pagination URLs point back to the expected HealthLake endpoint, allowing an actor to redirect subsequent requests to an actor-controlled server. Impacted versions: < 0.0.14 Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.

Bulletin ID: 2026-052-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 07/06/2026 13:45 PM PDT Description: Amazon mcp-gateway-registry is an open-source gateway and registry for Model Context Protocol (MCP) servers, providing centralized discovery, authentication/authorization, and proxying of MCP tools for AI agents. We identified CVE-2026-14471, an issue in the metrics-service retention policy management component where a caller-supplied table_name value is interpolated into SQL statements in identifier position without proper neutralization. An authenticated remote user is able to supply a crafted table_name value to execute arbitrary SQL queries against the metrics database. This allows the user to read stored data (including API key material) and to delete or alter stored data. Impacted versions: >=1.0.3 AND <=1.0.12 Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.

Bulletin ID: 2026-030-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 05/13/2026 10:00 PM PDT This is an ongoing issue. This bulletin will be updated as more information becomes available. Description: AWS is aware of the copy.fail or DirtyFrag class of issues - a set of privilege escalation issues affecting the Linux Kernel. We will update this bulletin as more information becomes available. Please see below for current patching timelines for affected services related to the Copy.fail kernel issue and all its variants. AWS recommends that customers apply all updates addressing these issues as soon as they are available. See more details at Security Bulletin (ID: 2026-030-AWS).

A vulnerability in the honojs hono web framework versions 4.12.4 through 4.13.10 allows unauthorized disclosure of static files protected by upstream middleware. The serveStatic component decodes a malformed percent-encoded path twice, causing it to bypass static prefix protections. This flaw does not allow directory traversal outside the static root. The issue is fixed in version 4.13.11.

This SUSE Linux Enterprise Kernel update addresses multiple security vulnerabilities affecting various kernel components including netfilter, KVM, 9p, iscsi, and libceph. The update fixes issues such as improper handling of Ethernet MAC headers, page overflow in SEV encryption, error path handling in 9p client walks, buffer appending in iscsi encoding, scratch area length computation in SEV, duplicate leaves in network shaper requests, and multiplication overflow in Ceph decoding.

This update for python311 fixes the following issues: - CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). - CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme (bsc#1276223). - CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226). - CVE-2026-19445: reassigned SNI callbacks with unreferenced SSLContext instances can cause use-after-free (bsc#1283969). - CVE-2026-19553: omitted server_hostname arguments in wrap_bio() can cause silent hostname verification bypasses (bsc#1283826). - CVE-2026-19672: tarfile extraction filter bypass allows creation of directories outside the destination (bsc#1276227). - CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure (bsc#1280459). Changes for python311: - Update to 3.11.17: - Security - gh-158446: Fix a crash or incorrect output that could occur when formatting a float or complex with a precision close to the platform's INT_MAX. PyOS_double_to_string() now raises ValueError for any precision of that magnitude, regardless of presentation type or value, as the format string parsers already did for precisions above INT_MAX. - gh-157190: Fixed a vulnerability in the tarfile data and tar extraction filters where a crafted archive using a hard link to a symbolic link could change the permissions and modification time of a file outside the destination directory, and expose its contents inside the extracted tree. This addresses CVE 2026-82049. (bsc#1280459, CVE-2026-82049) - gh-156793: asyncio: loop.start_tls() and loop.create_connection() now validate the server_hostname argument if an ssl.SSLContext is passed with check_hostname set to True, emitting DeprecationWarning if server_hostname is missing. (This will raise ValueError in Python 3.13 and later.) (bsc#1283826, CVE-2026-19553) - gh-156793: ssl.SSLContext.wrap_bio() now validates its server_side, server_hostname and session arguments similar to ssl.SSLContext.wrap_socket(), but for backward compatiblity reasons emits DeprecationWarning instead of ValueError. In particular, a context with check_hostname enabled and no server_hostname passed to wrap_bio() now emits DeprecationWarning to indicate the hostname wasn't checked. (In Python 3.13 and later, this raises ValueError.) - gh-157265: In tarfile, when extracting a link falls back to extracting a member of the archive, skip the member when the filter function returns None when called with the extracted member's name replaced with the link's. - gh-157953: Update bundled libexpat to version 2.8.5. - gh-156002: Bound the amount of data zipfile decompresses per read for members compressed with bzip2, LZMA, or Zstandard, matching the existing limit for deflate. A small archive member could previously expand into an unbounded allocation even when read in small chunks. (bsc#1277111, CVE-2026-15310) - gh-155999: Fix the tarfile tar and data extraction filters creating directories outside the destination for members whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name as given. (bsc#1276227, CVE-2026-19672) - gh-156293: Fix a crash in ssl when an sni_callback switches a connection to another SSLContext and the context that carries the callback is no longer referenced by the application. Servers that keep their sni_callback context alive (the usual case when it wraps the listening socket or is stored on the server object) were not affected. This addresses CVE-2026-19445. (bsc#1283969, CVE-2026-19445) - gh-155292: Change the stringprep module and encodings.idna codec to not consider Unicode codepoint attributes beyond those defined in RFC 3454. (bsc#1276226, CVE-2026-17084) - gh-155694: Fix CVE-2026-15806 by scoping HTTPPasswordMgr credentials to the URL scheme, preventing credentials stored for an HTTPS URL from being used for a matching HTTP URL, while URIs without a scheme continue to match any scheme. (bsc#1276223, CVE-2026-15806) - Library - gh-156002: zipfile again reads members through a third-party decompressor installed by monkey-patching the private _get_decompressor() to return an object that only implements old BZ2Decompressor API from Python 3.3. Note that decompressors without needs_input and two-argument decompress() are vulnerable to CVE 2026-15310. - gh-156353: Fix configparser parsing when using whitespace in delimiters. - Build - gh-155757: Set the --argv0 argument to wasmtime for WASI builds so the test suite passes. Otherwise the calculated paths to the stdlib for frozen modules is incorrect. - CVE-2026-15310: bound zipfile decompression for bzip2/LZMA (bsc#1277111, gh#python/cpython#156002)

Yamaha Corporation's VOCALOID6 Editor suffers from improper restriction of XML external entity (XXE) references. A specially crafted project file can cause the software to initiate unintended network communications, potentially leaking sensitive information or causing a denial-of-service (DoS) condition on the affected device. The vulnerability affects versions up to and including 6.13.2.

CVE-2026-98813 is a use-after-free vulnerability in the Linux kernel's BPF subsystem related to handling map BTF references in the memory allocator destructor record. The flaw occurs when a map's BTF reference is released prematurely while deferred work still accesses it, leading to a kernel slab-use-after-free error. This issue affects certain Linux kernel versions prior to 6.13 and 6.19, as well as version 7.0. The vulnerability has been fixed by ensuring the map BTF reference is held until the duplicated record is fully freed during deferred destruction.

A vulnerability in the Linux kernel version 6.13 affects x86 memory management on AMD F15h processors, specifically Carrizo and FX-8370E models. The issue involves incorrect application of virtual address alignment (va_align) to hugetlb mappings, causing vm_unmapped_area() to return addresses misaligned to huge page boundaries. This misalignment triggers a kernel BUG_ON during huge page teardown, potentially leading to system instability or crashes. The flaw has been fixed in specific commits addressing the alignment logic for hugetlbfs mappings.

A vulnerability in the Linux kernel SMB client related to the handling of allocated ranges queries can cause data corruption when interacting with Windows servers. The issue arises because the client queries allocated ranges without first flushing and committing data, leading to zero-filling of live data due to incoherent server responses. This flaw has been fixed in Linux kernel versions 5.11, 5.13, and 5.14.

CVE-2026-98570 is a vulnerability in the Linux kernel's IPv6 networking code where insufficient headroom is reserved for the MAC header in the dst_dev_overhead() function. This can cause a negative offset calculation and an out-of-bounds memory write during MAC header rebuilding when the MAC header is longer than expected, such as with VLAN devices with reorder_hdr off. The issue affects multiple seg6 encapsulation modes and related inline paths. The vulnerability has been fixed in Linux kernel versions 5.11, 5.16, 6.2, 6.7, 6.13, and 6.14.

A race condition vulnerability in the Linux kernel's VXLAN implementation could cause out-of-bounds writes when generating neighbor replies. The flaw arises from inconsistent headroom size sampling during packet allocation and reservation, leading to potential memory corruption. This issue affects certain Linux kernel versions prior to 3.14 and has been fixed in versions 3.13 and 3.14.

A vulnerability in the Linux kernel's netfilter nf_tables subsystem causes expired catchall elements to be skipped incorrectly during insert and delete operations. This leads to stale entries that block re-insertion and cause silent failures or incorrect deletions until garbage collection removes them. The issue affects version 5.13 and has been fixed in subsequent commits.

A reflected Cross-site Scripting (XSS) vulnerability exists in ThemeGrill eStore plugin versions up to and including 1.6.13. This vulnerability arises from improper neutralization of input during web page generation, allowing an attacker to inject malicious scripts that execute in the context of a victim's browser. The vulnerability has a CVSS 3.1 score of 7.1, indicating high severity with potential impacts on confidentiality, integrity, and availability. No patch or remediation details are provided in the available data.

A vulnerability in pulldown-cmark versions 0.13.0 through 0.13.4 causes exponential event growth when parsing Markdown with the ENABLE_WIKILINKS option enabled. Specifically, wikilinks with a pipe separator and empty display text leak child node sibling chains, causing the parser to generate exponentially more events, which can exhaust memory. This flaw is fixed in version 0.13.5.

Vikunja versions from 0.13.0 up to but not including 2.7.0 have an incorrect authorization vulnerability. This flaw allows project members with Write permission to delete admin-level link shares by exploiting a permission check that reads an unloaded share object. Attackers can send DELETE requests to project share endpoints with sequential share IDs to revoke admin links and invalidate share sessions.