CLSA-2026-1787299143 TuxCare security update for django (3 CVEs)

TuxCare rebuilt django to address 3 CVEs. Fixed in 5.0.2.post4+tuxcare...

CLSA-2026-1787236015 TuxCare security update for 14 packages (1 CVE)

TuxCare rebuilt 14 packages to address 1 CVE. Fixed in 14.2.35-tuxcare.8...

CLSA-2026-1787224571 TuxCare security update for gitpython (2 CVEs)

TuxCare rebuilt gitpython to address 2 CVEs. Fixed in 3.1.31.post8+tuxcare...

CLSA-2026-1787220376 TuxCare security update for urllib3 (1 CVE)

TuxCare rebuilt urllib3 to address 1 CVE. Fixed in 1.25.11.post7+tuxcare...

CLSA-2026-1787149562 TuxCare security update for 24 packages (2 CVEs)

TuxCare rebuilt 24 packages to address 2 CVEs. Fixed in 9.4.41.v20210516-tuxcare.4...

CLSA-2026-1787141079 TuxCare security update for log4j:log4j (1 CVE)

TuxCare rebuilt log4j:log4j to address 1 CVE. Fixed in 1.2.16-tuxcare.2...

RHSA-2026:56219 Red Hat Security Advisory: python3 security update

Bulletin has no description...

CLSA-2026-1787028610 TuxCare security update for setuptools (1 CVE)

TuxCare rebuilt setuptools to address 1 CVE. Fixed in 75.8.0.post2+tuxcare...

Security Vulnerabilities fixed in Firefox ESR 115.39 — Mozilla

Internally found bugs present in Firefox ESR 115.38, Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited...

CLSA-2026-1787001707 TuxCare security update for ajv (1 CVE)

TuxCare rebuilt ajv to address 1 CVE. Fixed in 6.10.0-tuxcare.2...

CLSA-2026-1786943805 TuxCare security update for org.apache.activemq (1 CVE)

TuxCare rebuilt 55 org.apache.activemq packages to address 1 CVE. Fixed in 2.37.0-tuxcare.1...

CLSA-2026-1786791606 TuxCare security update for @angular (3 CVEs)

TuxCare rebuilt 17 @angular packages to address 3 CVEs. Fixed in 18.2.14-tuxcare.13...

CLSA-2026-1786748284 TuxCare security update for @angular (2 CVEs)

TuxCare rebuilt 17 @angular packages to address 2 CVEs. Fixed in 15.2.10-tuxcare.12...

CLSA-2026-1786746120 TuxCare security update for @angular (2 CVEs)

TuxCare rebuilt 17 @angular packages to address 2 CVEs. Fixed in 14.3.0-tuxcare.10...

CLSA-2026-1786743251 TuxCare security update for @angular (2 CVEs)

TuxCare rebuilt 17 @angular packages to address 2 CVEs. Fixed in 12.2.0-tuxcare.4...

CLSA-2026-1786737301 TuxCare security update for @angular (2 CVEs)

TuxCare rebuilt 19 @angular packages to address 2 CVEs. Fixed in 6.1.10-tuxcare.11...

CLSA-2026-1786737120 TuxCare security update for @angular (2 CVEs)

TuxCare rebuilt 19 @angular packages to address 2 CVEs. Fixed in 6.0.1-tuxcare.5...

CLSA-2026-1786735405 TuxCare security update for @angular (2 CVEs)

TuxCare rebuilt 18 @angular packages to address 2 CVEs. Fixed in 5.2.7-tuxcare.5...

Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list (Incomplete fix for CVE-2026-31892)

Summary The allow-list fix for CVE-2026-31892 GHSA-3wf5-g532-rcrr, and its follow-up coverage of hostNetwork/securityContext/serviceAccountName in GHSA-3775-99mw-8rp4, is incomplete. workflow/util/merge.go ValidateUserOverrides / SanitizeUserWorkflowSpec walk only the top-level fields of...

CLEANSTART-2026-YY19713 Security fixes in keycloak 26.7.0-r1

Package keycloak version 26.7.0-r1 fixes 13 vulnerabilities: ghsa-rmj7-2vxq-3g9f, ghsa-j3rv-43j4-c7qm, ghsa-9fxm-vc8v-hj55, ghsa-5hh8-q8hv-fr38, ghsa-rcqc-6cw3-h962...