43845 matches found
USN-8662-1 linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - Cryptographic API; - InfiniBand drivers; - Media drivers; - STMicroelectronics network drivers;...
USN-8657-1 vim vulnerabilities
It was discovered that Vim incorrectly handled memory when decoding certain JSON input. An attacker could possibly use this issue to cause Vim to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. CVE-2026-73071 Yazan Balawn...
librenswan: IKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payload
A flaw was found in Libreswan's implementation of IKEv1 authentication via raw RSA signatures. When processing an IKEv1 packet using PKCS 1 v1.5 RSA encryption, the RSAauthenticatehashsignaturerawrsa function fails to properly validate the length of the authentication hash. A remote,...
CVE-2026-14668 affecting package postgresql for versions less than 16.15-1
CVE-2026-14668 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-15741 affecting package postgresql for versions less than 16.15-1
CVE-2026-15741 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-64654 affecting package gh for versions less than 2.97.0-1
CVE-2026-64654 affecting package gh for versions less than 2.97.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-18024 affecting package postgresql for versions less than 16.15-1
CVE-2026-18024 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-14671 affecting package postgresql for versions less than 16.15-1
CVE-2026-14671 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-6464 affecting package postgresql for versions less than 16.15-1
CVE-2026-6464 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-19385 affecting package postgresql for versions less than 16.15-1
CVE-2026-19385 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-14669 affecting package postgresql for versions less than 16.15-1
CVE-2026-14669 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...
Malicious code in test-flow-1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e7f0fbad80f9bdcba1c9d37322137d8f3a7bd86353650c5f946c73b1bb4637 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Why "Shady AI" is Security's Next Big Governance Problem
In March 2026, an internal AI agent at Meta triggered a “Sev 1” incident after sensitive company and user data was exposed to employees who weren’t authorized to access it. The incident began when a Meta employee posted a technical question on an internal forum. An engineer used an approved AI...
CLSA-2026-1787224839 TuxCare security update for bootstrap (7 CVEs)
TuxCare rebuilt bootstrap to address 7 CVEs. Fixed in 3.3.2-tuxcare.1...
CVE-2026-53791 affecting package rsync for versions less than 3.5.0-1
CVE-2026-53791 affecting package rsync for versions less than 3.5.0-1. A patched version of the package is available...
CVE-2026-70454 affecting package rsync for versions less than 3.5.0-1
CVE-2026-70454 affecting package rsync for versions less than 3.5.0-1. A patched version of the package is available...
CVE-2026-53803 affecting package rsync for versions less than 3.5.0-1
CVE-2026-53803 affecting package rsync for versions less than 3.5.0-1. A patched version of the package is available...
CVE-2026-53795 affecting package rsync for versions less than 3.5.0-1
CVE-2026-53795 affecting package rsync for versions less than 3.5.0-1. A patched version of the package is available...