Identity & Access
Vault Update Prevents Audit Prefix Log InjectionNew!!
HashiCorp patches Vault audit prefix injection. Confirm exposure, deploy the supported fix, validate operations, and retain evidence.
Vault Update Fixes Trailing-Slash ACL Deny BypassNew!!
HashiCorp patches Vault ACL deny bypass. Confirm exposure, deploy the supported fix, validate operations, and retain evidence.
Vault Update Prevents New-Node Join Credential DisclosureNew!!
HashiCorp patches Vault join credential disclosure. Confirm exposure, deploy the supported fix, validate operations, and retain evidence.
Ubuntu Fixes Debian-LAN Kerberos Password-Change PermissionsNew!!
Ubuntu patches debian-lan-config. Match the affected suite, install supported security packages, validate dependent services, and retain update evidence.
Ubuntu Patches Ruby OpenID Server-Side Request ForgeryNew!!
Ubuntu patches ruby-openid. Match the affected suite, install supported security packages, validate dependent services, and retain update evidence.
Okta Access Gateway 2026.10.2 Fixes Authentication Source Verification
Okta Access Gateway 2026.10.2 fixes authentication-source verification. Upgrade appliances, review active sessions and admin access, and retain evidence.
Okta Access Gateway 2026.10.2 Fixes Admin Console Command Execution
Okta Access Gateway 2026.10.2 fixes authenticated Admin Console command execution. Upgrade appliances, review administrator activity, and retain evidence.
Okta Access Gateway 2026.44.0 Updates PHP for Two RCE Flaws
Okta Access Gateway 2026.44.0 updates PHP for two RCE flaws. Upgrade appliances, verify gateway configuration and exposure, and retain evidence.
CERT/CC Details BoringSSL Name-Constraint Validation Differences
CERT/CC documents five BoringSSL Name Constraints findings with mixed status. Confirm the validation path, apply available updates, and retain evidence.
CERT/CC Coordinates Name-Constraint Differences Across TLS Libraries
CERT/CC details Name Constraints differences across TLS libraries. Map validation paths, apply project fixes, test authorization, and retain evidence.