CVE-2026-29169 affecting package httpd for versions less than 2.4.67-1

CVE-2026-29169 affecting package httpd for versions less than 2.4.67-1. An upgraded version of the package is available that resolves this issue...

[SECURITY] Fedora 44 Update: chromium-148.0.7778.167-1.fc44

Chromium is an open-source web browser, powered by WebKit Blink...

OPENSUSE-SU-2026:20763-1 Security update for go1.25

This update for go1.25 fixes the following issues Security issues: - CVE-2026-33811: net: crash when handling long CNAME response bsc1264508. - CVE-2026-33814: net/http: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1264506. - CVE-2026-39817: cmd/go: "go tool pack" does...

PT-2026-43469

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=513677122 Crash type: Heap-buffer-overflow READ 1 Crash state: md decode utf8 md skip unicode whitespace md link label hash...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : mozjs115 (SUSE-SU-2026:1870-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1870-1 advisory. This update for mozjs115 fixes the following issues - CVE-2026-32776: libexpat: NULL pointer...

SUSE SLED15 / SLES15 Security Update : Mesa (SUSE-SU-2026:1835-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:1835-1 advisory. This update for Mesa fixes the following issue: - CVE-2026-40393: out-of-bounds memory access can occur in WebGPU becau...

PT-2026-43175

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=513047073 Crash type: Heap-buffer-overflow READ 1 Crash state: MqttDecode Props MqttDecode Disconnect MqttClient DecodePacket...

[SECURITY] Fedora 43 Update: firefox-150.0.3-1.fc43

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Debian dsa-6274 : ata-modules-6.12.74+deb13+1-armmp-di - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6274 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6274-1 [email protected] https://www.debian.org/securit...

CVE-2026-7261 affecting package php for versions less than 8.3.31-1

CVE-2026-7261 affecting package php for versions less than 8.3.31-1. A patched version of the package is available...

CVE-2026-6722 affecting package php for versions less than 8.3.31-1

CVE-2026-6722 affecting package php for versions less than 8.3.31-1. A patched version of the package is available...

CVE-2026-6735 affecting package php for versions less than 8.3.31-1

CVE-2026-6735 affecting package php for versions less than 8.3.31-1. A patched version of the package is available...

CVE-2026-23479 affecting package valkey for versions less than 8.0.9-1

CVE-2026-23479 affecting package valkey for versions less than 8.0.9-1. A patched version of the package is available...

CVE-2026-6665 affecting package pgbouncer for versions less than 1.25.2-1

CVE-2026-6665 affecting package pgbouncer for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-7262 affecting package php for versions less than 8.3.31-1

CVE-2026-7262 affecting package php for versions less than 8.3.31-1. A patched version of the package is available...

CVE-2026-6667 affecting package pgbouncer for versions less than 1.25.2-1

CVE-2026-6667 affecting package pgbouncer for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-14179 affecting package php for versions less than 8.3.31-1

CVE-2025-14179 affecting package php for versions less than 8.3.31-1. A patched version of the package is available...

CVE-2026-44656 affecting package vim for versions less than 9.2.0461-1

CVE-2026-44656 affecting package vim for versions less than 9.2.0461-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-6666 affecting package pgbouncer for versions less than 1.25.2-1

CVE-2026-6666 affecting package pgbouncer for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-43989

JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, the uploadwasm MCP tool accepted a filesystem path from the agent and uploaded whatever bytes the path resolved to, with no validation of location, symlink target, file size, or file format. This vulnerability is...