GHSA-F23P-VX2J-J53R vulnerabilities

Vulnerabilities for packages: kibana, wazuh-dashboard-fips, langfuse-fips, langfuse, wazuh-dashboard...

CVE-2026-71848 vulnerabilities

Vulnerabilities for packages: kibana, wazuh-dashboard-fips, langfuse-fips, langfuse, wazuh-dashboard...

GHSA-54FX-42GC-7VW4 vulnerabilities

Vulnerabilities for packages: kibana, wazuh-dashboard-fips, langfuse-fips, langfuse, wazuh-dashboard...

CVE-2026-71849 vulnerabilities

Vulnerabilities for packages: kibana, wazuh-dashboard-fips, langfuse-fips, langfuse, wazuh-dashboard...

GHSA-79QM-7RJ5-M7R9 vulnerabilities

Vulnerabilities for packages: kibana, wazuh-dashboard-fips, langfuse-fips, langfuse, wazuh-dashboard...

CVE-2026-71850 vulnerabilities

Vulnerabilities for packages: kibana, wazuh-dashboard-fips, langfuse-fips, langfuse, wazuh-dashboard...

GHSA-3H9F-R86X-QVJX vulnerabilities

Vulnerabilities for packages: authentik-fips, authentik, openstack-horizon-2026.1-fips, openstack-horizon-2026.1...

GHSA-CRHF-3PFG-W68W vulnerabilities

Vulnerabilities for packages: authentik-fips, authentik, openstack-horizon-2026.1-fips, openstack-horizon-2026.1...

Updated php8.4 packages fix security vulnerabilities

The updated php 8.4 packages fix some security vulnerabilities. See the references for more information...

Updated php8.5 packages fix security vulnerabilities

Updated php 8.5 packages fix some security vulnerabilities. For details see the references...

openjdk: Improve DTLS handshaking (Oracle CPU 2026-07)

A flaw was found in OpenJDK. The DTLS implementation is open to two different DoS attacks...

openjdk: Enhance Jar handling (Oracle CPU 2026-07)

A flaw was found in OpenJDK. There exists a potential existential forgery vulnerability in CMS and protocols which use CMS. In Java, CMS is used to sign JAR files...

CVE-2026-63623

A flaw was found in libvirt. During storage volume clone or convert operations, newly created volume images were temporarily world-readable. This was caused by the qemu-img utility running with overly permissive file creation settings, allowing any local user to read the full guest disk contents...

CVE-2026-67214 vulnerabilities

Vulnerabilities for packages: nextcloud-server, dotstatsuite-supercore, opensearch-dashboards, langfuse-fips, jitsucom-jitsu, opensearch-dashboards-fips, langfuse, arangodb, gitlab-rails-ce-fips, gitlab-rails-ce...

GHSA-28WG-GHJ8-5HJV vulnerabilities

Vulnerabilities for packages: langfuse, opensearch-dashboards, nextcloud-server, jitsucom-jitsu...

CVE-2026-67214 vulnerabilities

Vulnerabilities for packages: langfuse, opensearch-dashboards, nextcloud-server, jitsucom-jitsu...

CVE-2026-18503

Attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU when applications pass unbounded input to csv.Sniffer.sniff...

CVE-2026-68161

In the Linux kernel, the following vulnerability has been resolved: sctp: close UDP tunnel sockets during netns teardown procsctpdoudpport starts per-net SCTP UDP tunneling sockets when net.sctp.udpport is set, and stops/restarts them when the sysctl value changes. The netns exit path does not st...

CVE-2026-68115

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx10: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit ac6f00beb658239bced4aaed9efbb04a35348d48...

openjdk: Enhance Jar handling (Oracle CPU 2026-07)

A flaw was found in OpenJDK. There exists a potential existential forgery vulnerability in CMS and protocols which use CMS. In Java, CMS is used to sign JAR files...