Astra Linux – Vulnerability in guava-libraries

A vulnerability exists in the creation of temporary directories in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com.google.common.io.Files.createTempDir. By default, on Unix-like systems, the...

CLEANSTART-2026-WU53412 Security fixes in maven 3.8.6-r1

Package maven version 3.8.6-r1 fixes 4 vulnerabilities: CVE-2023-2976, CVE-2020-8908, CVE-2025-48924, CVE-2025-67030...

CLSA-2026-1778633133 TuxCare security update for com.google.guava (1 CVE)

TuxCare rebuilt 5 com.google.guava packages to address 1 CVE. Fixed in 16.0.1-tuxcare.1...

CLSA-2026-1774484488 TuxCare security update for com.google.guava (1 CVE)

TuxCare rebuilt 4 com.google.guava packages to address 1 CVE. Fixed in 25.1-jre-tuxcare.1...

CLSA-2026-1774398096 TuxCare security update for com.google.guava (1 CVE)

TuxCare rebuilt 5 com.google.guava packages to address 1 CVE. Fixed in 18.0-tuxcare.1...

CLSA-2026-1773015253 TuxCare security update for com.google.guava (2 CVEs)

TuxCare rebuilt 4 com.google.guava packages to address 2 CVEs. Fixed in 27.1-android-tuxcare.1...

CLSA-2025-1765411681 TuxCare security update for com.google.guava (2 CVEs)

TuxCare rebuilt 3 com.google.guava packages to address 2 CVEs. Fixed in 25.1-android-tuxcare.1...

CLSA-2025-1752019363 TuxCare security update for com.google.guava (2 CVEs)

TuxCare rebuilt 5 com.google.guava packages to address 2 CVEs. Fixed in 31.1-jre.tuxcare.1...

CLSA-2024-1733097629 TuxCare security update for com.google.guava (3 CVEs)

TuxCare rebuilt 5 com.google.guava packages to address 3 CVEs. Fixed in 20.0.tuxcare...

CLSA-2024-1726444801 TuxCare security update for com.google.guava (2 CVEs)

TuxCare rebuilt 5 com.google.guava packages to address 2 CVEs. Fixed in 30.1-jre.tuxcare...

Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data.

Summary IBM has released the below fix for IBM Db2® on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data in response to multiple vulnerabilities found in multiple components. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details...

ROOT-APP-MAVEN-CVE-2023-2976 CVE-2023-2976 in io.root.com.google.guava:guava - Patched by Root

Root has patched CVE-2023-2976 in the io.root.com.google.guava:guava package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2018-10237 CVE-2018-10237 in io.root.com.google.guava:guava - Patched by Root

Root has patched CVE-2018-10237 in the io.root.com.google.guava:guava package for Root:Maven. Multiple fixed versions available...

Unity Linux 20.1060e / 20.1070e Security Update: guava (UTSA-2026-017554)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017554 advisory. A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary...

Security Bulletin: Vulnerabilities in hoek, Bouncy Castle Inc, Spring Framework, golang, Apache Commons, semver and Google Guava might affect IBM Storage Defender Copy Data Management

Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in hoek, Bouncy Castle Inc, Spring Framework, golang, Apache Commons, semver and Google Guava. Vulnerabilities include allowing a malicious user to modify the prototype of "Object" via proto, causing the addition...

EUVD-2020-0502

Malware in sbrugna...

EUVD-2021-0611

Malware in sbrugna...

EUVD-2023-1730

Malicious code in bioql PyPI...

Security Bulletin: Use of Java's default temporary directory for file creation in `FileBackedOutputStream` allows other users and apps to be able to access the files created by the class, which affects IBM watsonx.data

Summary Use of Java's default temporary directory for file creation in FileBackedOutputStream in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary directory to be able to access the...

Security Bulletin: IBM webMethods Integration Server is affected by vulnerable Google Guava 30.0 jar used in the GraphQL functionality

Summary Google Guava is used by IBM webMethods Integration Server as part of the GraphQL functionality. CVE-2023-2976, CVE-2020-8908. Vulnerability Details CVEID:CVE-2023-2976 DESCRIPTION: Use of Java's default temporary directory for file creation in FileBackedOutputStream in Google Guava versio...