March 10, 2026—KB5078752 (OS Build 17763.8511)

March 10, 2026—KB5078752 OS Build 17763.8511 Applies To Windows Server 2019 Win 10 Ent LTSC 2019 Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices have started expiring in June 2026. This might affect the ability of certain personal and...

March 10, 2026—KB5079473 (OS Builds 26200.8037 and 26100.8037)

March 10, 2026—KB5079473 OS Builds 26200.8037 and 26100.8037 Applies To Windows 11 version 25H2, all editions Windows 11 version 24H2, all editions This cumulative update for Windows 11, version 25H2 and 24H2 KB5079473, includes the latest security fixes and improvements, along with non-security...

kernel security update

5.14.0-611.38.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

KB5079234: Servicing stack update for Windows Server 2012: March 10, 2026

KB5079234: Servicing stack update for Windows Server 2012: March 10, 2026 Applies To Windows Server 2012 ESU Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices have started expiring in June 2026. This might affect the ability of certain...

KB5079233: Servicing stack update for Windows Server 2012 R2: March 10, 2026

KB5079233: Servicing stack update for Windows Server 2012 R2: March 10, 2026 Applies To Windows Server 2012 R2 ESU Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices have started expiring in June 2026. This might affect the ability of certa...

Oracle Linux 8 : osbuild-composer (ELSA-2026-3898)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-3898 advisory. 101.4-4.0.1 - Support using repository definitons with OCI variables JIRA: OLDIS-38657 - Update repositories to contain OCI variables - Remove image...

EUVD-2026-10189

A vulnerability has been found in JeecgBoot up to 3.9.1. Affected is the function isExistSqlInjectKeyword of the file /jeecg-boot/sys/api/getDictItems. Such manipulation leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via the isExistSqlInjectKeyword function. An attacker can execute unauthorized SQL commands by submitting crafted input to this endpoint. Remediation There is no fixed version for...

CVE-2026-3672

A vulnerability has been found in JeecgBoot up to 3.9.1. Affected is the function isExistSqlInjectKeyword of the file /jeecg-boot/sys/api/getDictItems. Such manipulation leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used...

[SECURITY] Fedora 44 Update: keylime-7.14.1-1.fc44

Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution...

osbuild-composer security update

101.4-4.0.1 - Support using repository definitons with OCI variables JIRA: OLDIS-38657 - Update repositories to contain OCI variables - Remove image types Minimal-raw and wsl JIRA: OLDIS-38123 - Increase default /boot size to 1GB Orabug: 36827079 - support for building OL8/9 images on Oracle Linu...

Oracle Linux 9 : osbuild-composer (ELSA-2026-3753)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-3753 advisory. 149-4.0.1 - Add missing dependency over dracut-config-rescue for image-installer ORABUG: 38587453 - Switch to UEKR8 repositories for OL9.6 Orabug:...

NewStart CGSL MAIN 6.06 (SP) : grub2 Multiple Vulnerabilities (NS-SA-2026-0016)

The remote NewStart CGSL host, running version MAIN 6.06 SP, has grub2 packages installed that are affected by multiple vulnerabilities: - Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to bypass authentication, obtain sensitive information, or cause a...

OPENSUSE-RU-2026:20325-1 Recommended update for shim

This update for shim fixes the following issues: This update for shim fixes the following issues: shim is updated to version 16.1: - shimstartimage: fix guid/handle pairing when uninstalling protocols - Fix uncompressed ipv6 netboot - fix test segfaults caused by uninitialized memory -...

SUSE-RU-2026:20683-1 Recommended update for shim

This update for shim fixes the following issues: This update for shim fixes the following issues: shim is updated to version 16.1: - shimstartimage: fix guid/handle pairing when uninstalling protocols - Fix uncompressed ipv6 netboot - fix test segfaults caused by uninitialized memory -...

Important: Red Hat Security Advisory: Red Hat Build of Apache Camel 4.14.4 for Spring Boot release.

Red Hat build of Apache Camel 4.14.4 for Spring Boot patch release and security update is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

cn.herodotus.dante:dante-message-servlet-websocket (>=4.0.0.0-m2, <=4.0.0.0-m3), cn.herodotus.dante:servlet-message-spring-boot-starter (>=4.0.0.0-m2, <=4.0.0.0-m3) +800 more potentially affected by CVE-2025-11143 via org.eclipse.jetty:jetty-http (>=12.1.0, <=12.1.4)

org.eclipse.jetty:jetty-http MAVEN version =12.1.0, =4.0.0.0-m2, =4.0.0.0-m2, =7.0.0-m2, =9.0.0, =9.1.0, =9.0.0, =9.1.0, =2.24.0, =21.3.3, =0.2.1-alpha, =0.2.1-alpha, =4.0.0-1215, =4.0.0-1215, =2.4.2, =2.4.5 - com.github.cafaudit:caf-audit-service-container 5.0.5-1360 and more Source cves:...

ba.sake:pac4j-testkit (>=0.1.0, <=0.2.0), com.baomidou:shaun-core (2.0.0) +5 more potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (>=6.0.3, <=6.2.2)

org.pac4j:pac4j-jwt MAVEN version =6.0.3, =0.1.0, =7.1.0-rc6, =7.1.0-rc6, =7.3.4 Source cves: CVE-2026-29000 Source advisory: SNYK:JAVA-ORGPAC4J-15428218...

ba.sake:pac4j-testkit (>=0.1.0, <=0.2.0), com.github.hiwepy:pac4j-spring-boot-starter (3.3.x.20241020.release) +2 more potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (>=6.0.5, <=6.2.2)

org.pac4j:pac4j-jwt MAVEN version =6.0.5, =0.1.0, =7.1.0-rc6, =7.1.0-rc6, =7.3.4 Source cves: CVE-2026-29000 Source advisory: GHSA-PM7G-W2CF-Q238...

org.linuxprobe:shiro-pac4j-base (>=0.0.1.rs1, <=0.0.1.rs4), org.linuxprobe:shiro-pac4j-spring-boot-start (>=0.0.1.rs1, <=0.0.1.rs7) potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (3.8.3)

org.pac4j:pac4j-jwt MAVEN version 3.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-jwt and may be impacted: - org.linuxprobe:shiro-pac4j-base =0.0.1.rs1, =0.0.1.rs1, =0.0.1.rs7 Source cves: CVE-2026-29000 Source advisory:...