CVE-2026-56855 affecting package gh for versions less than 2.101.0-1

CVE-2026-56855 affecting package gh for versions less than 2.101.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-89160 affecting package pcre2 for versions less than 10.48-1

CVE-2026-89160 affecting package pcre2 for versions less than 10.48-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-89157 affecting package pcre2 for versions less than 10.48-1

CVE-2026-89157 affecting package pcre2 for versions less than 10.48-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-84304 affecting package gh for versions less than 2.101.0-1

CVE-2026-84304 affecting package gh for versions less than 2.101.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-81634 affecting package unbound for versions less than 1.26.1-1

CVE-2026-81634 affecting package unbound for versions less than 1.26.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-87766 affecting package bubblewrap for versions less than 0.12.0-1

CVE-2026-87766 affecting package bubblewrap for versions less than 0.12.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-78254 affecting package ant for versions less than 1.10.18-1

CVE-2026-78254 affecting package ant for versions less than 1.10.18-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-77860 affecting package unbound for versions less than 1.26.1-1

CVE-2026-77860 affecting package unbound for versions less than 1.26.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-59679 affecting package libXfont2 for versions less than 2.0.9-1

CVE-2026-59679 affecting package libXfont2 for versions less than 2.0.9-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-82720 affecting package unbound for versions less than 1.26.1-1

CVE-2026-82720 affecting package unbound for versions less than 1.26.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-72924 affecting package gh for versions less than 2.101.0-1

CVE-2026-72924 affecting package gh for versions less than 2.101.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-81642 affecting package unbound for versions less than 1.26.1-1

CVE-2026-81642 affecting package unbound for versions less than 1.26.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-16515

CVE-2026-16515 affects the Zephyr RTOS IPv6 stack in net_icmpv6_send_error() (subsys/net/ip/icmpv6.c), which failed to implement two of the three RFC 4443 §2.4 suppression rules for ICMPv6 error replies. An unauthenticated attacker on the same link can trigger ICMPv6 reflection and amplification ...

CVE-2026-16515 ICMPv6 error messages sent for multicast-destined packets and non-unique source addresses enable network amplification in Zephyr's IPv6 stack

neticmpv6senderror in subsys/net/ip/icmpv6.c implemented only one of the three RFC 4443 section 2.4 suppression rules do not answer an ICMPv6 error with an ICMPv6 error. It did not check whether the triggering packet's source address identifies a single node rule e.6 or whether the packet was sen...

CVE-2026-93569 Io.netty/netty-codec-http2: http/1 absolute-form host mismatch is translated to http/2 :authority, overriding the request-target authority

A flaw was found in Netty. A remote unauthenticated attacker can exploit a vulnerability in Netty's HTTP/1 to HTTP/2 conversion process. When an HTTP/1 request includes both an absolute-form request-target and a conflicting Host header, Netty incorrectly prioritizes the Host header for the HTTP/2...

CVE-2026-93567 Io.netty/netty-codec-http2: http/1 authority-form connect is translated to malformed http/2 connect with host-controlled :authority

A flaw was found in Netty's HTTP/2 codec. When converting HTTP/1 CONNECT requests to HTTP/2, the component incorrectly uses the Host header instead of the CONNECT authority-form request-target for the tunnel authority. A remote attacker can exploit this by supplying a different Host header, leadi...

CLSA-2026-1789728529 TuxCare security update for org.springframework.data (4 CVEs)

TuxCare rebuilt 5 org.springframework.data packages to address 4 CVEs. Fixed in 3.6.10-tuxcare.1...

CLSA-2026-1789710059 TuxCare security update for org.springframework.graphql (2 CVEs)

TuxCare rebuilt 2 org.springframework.graphql packages to address 2 CVEs. Fixed in 1.1.7-tuxcare.1...

Signal-iOS v8.29.0.1866

Signal iOS Signal is a free and open source messaging app for simple private communication with friends. Also available on Android and Desktop. Questions? For troubleshooting and questions, please visit our support center or unofficial community forum. Contributing Bug Reports The best way to...

CVE-2026-93569: Inconsistent Interpretation of HTTP Requests

A flaw was found in Netty. A remote unauthenticated attacker can exploit a vulnerability in Netty's HTTP/1 to HTTP/2 conversion process. When an HTTP/1 request includes both an absolute-form request-target and a conflicting Host header, Netty incorrectly prioritizes the Host header for the HTTP/2...