462156 matches found
CVE-2026-81912
Concrete CMS before 9.5.3 contains a Cross-Site Request Forgery (CSRF) flaw in the Move Multiple Groups feature. The dashboard/users/groups/bulkupdate/confirm() endpoint moved selected group tree nodes without validating an action token, allowing a state-changing group move to be processed agains...
EUVD-2026-76243
Concrete CMS before 9.5.3 is vulnerable to Cross-Site Request Forgery in the Move Multiple Groups feature. The dashboard/users/groups/bulkupdate/confirm endpoint moved the selected group tree nodes without validating an action token, so a state-changing group move could be processed for an...
CLSA-2026-1789154458 TuxCare security update for dompurify (3 CVEs)
TuxCare rebuilt dompurify to address 3 CVEs. Fixed in 2.4.7-tuxcare.5...
CLSA-2026-1789154068 TuxCare security update for dompurify (2 CVEs)
TuxCare rebuilt dompurify to address 2 CVEs. Fixed in 3.0.3-tuxcare.5...
CLSA-2026-1789153936 TuxCare security update for dompurify (1 CVE)
TuxCare rebuilt dompurify to address 1 CVE. Fixed in 2.4.0-tuxcare.5...
[SECURITY] Fedora 45 Update: kernel-headers-7.2.4-300.fc45
Kernel-headers includes the C header files that specify the interface between the Linux kernel and userspace libraries and programs. The header files define structures and constants that are needed for building most standard programs and are also needed for rebuilding the glibc package...
[SECURITY] Fedora 45 Update: python-asteval-1.0.10-1.fc45
ASTEVAL is a safeish evaluator of Python expressions and statements, using Python's ast module. The idea is to provide a simple, safe, and robust miniature mathematical language that can handle user-input. The emphasis here is on mathematical expressions, and so many functions from numpy are...
[SECURITY] Fedora 45 Update: darktable-5.6.1-2.fc45
darktable manages your camera raw files and images in a database, lets you view them through lighttable mode and develop/enhance them in darkroom mode...
[SECURITY] Fedora 45 Update: composer-2.10.3-1.fc45
Composer helps you declare, manage and install dependencies of PHP projects, ensuring you have the right stack everywhere. Documentation: https://getcomposer.org/doc/...
[SECURITY] Fedora 45 Update: bluez-5.87-7.fc45
Utilities for use in Bluetooth applications: - avinfo - bluemoon - bluetoothctl - bluetoothd - btattach - btmon - hex2hcd - mpris-proxy The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A...
CLSA-2026-1789152222 TuxCare security update for dompurify (2 CVEs)
TuxCare rebuilt dompurify to address 2 CVEs. Fixed in 2.3.0-tuxcare.5...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.73 bug fix and security update
Red Hat OpenShift Container Platform release 4.14.73 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...
CLSA-2026-1789150088 TuxCare security update for org.springframework.graphql (6 CVEs)
TuxCare rebuilt 2 org.springframework.graphql packages to address 6 CVEs. Fixed in 1.3.7-tuxcare.4...
MGASA-2026-0391 Updated glibc package fixes security vulnerabilities
Potential buffer overflow in nssprintrrf TSIG handling path. CVE-2026-5435 Buffer overread in nsprintrrf with corrupted RDATA field. CVE-2026-6238 wordexp with WRDEAPPEND can return or use invalid memory. CVE-2026-6368 Potential stack-based buffer clash during tilde expansion in wordexp...
CLSA-2026-1789146735 TuxCare security update for dompurify (1 CVE)
TuxCare rebuilt dompurify to address 1 CVE. Fixed in 3.2.3-tuxcare.4...
CLSA-2026-1789146579 TuxCare security update for dompurify (1 CVE)
TuxCare rebuilt dompurify to address 1 CVE. Fixed in 3.1.6-tuxcare.8...
CLSA-2026-1789146534 TuxCare security update for org.springframework.ldap:spring-ldap-core (1 CVE)
TuxCare rebuilt org.springframework.ldap:spring-ldap-core to address 1 CVE. Fixed in 2.4.1-tuxcare.2...
CLSA-2026-1789146166 TuxCare security update for io.netty (1 CVE)
TuxCare rebuilt 47 io.netty packages to address 1 CVE. Fixed in 4.1.119.Final-tuxcare.2...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nodejs26: nodejs26-26.8.2-0.1.hum1 aarch64, x8664 nodejs26-bin-26.8.2-0.1.hum1 noarch nodejs26-devel-26.8.2-0.1.hum1 aarch64, x8664 nodejs26-docs-26.8.2-0.1.hum1 noarch...