USN-8638-1: Axios vulnerabilities

Ameer Assadi discovered that Axios did not properly handle certain hostnames when applying NOPROXY rules. An attacker could possibly use this issue to bypass proxy restrictions and access internal services, resulting in server-side request forgery. CVE-2025-62718 It was discovered that Axios did...

[SECURITY] [DLA 4738-1] xorg-server security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4738-1 [email protected] https://www.debian.org/lts/security/ Arnaud Rebillout August 13, 2026 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 4737-1] xorg-server security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4737-1 [email protected] https://www.debian.org/lts/security/ Arnaud Rebillout August 13, 2026 https://wiki.debian.org/LTS -...

Debian dla-4736 : python-django-doc - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4736 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4736-1 [email protected]...

CLSA-2026-1786358483 TuxCare security update for multer (2 CVEs)

TuxCare rebuilt multer to address 2 CVEs. Fixed in 1.4.5-lts.2-tuxcare.4...

Debian dla-4726 : ca-certificates - security update

The remote Debian 11 / 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4726 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4726-1 [email protected]...

EUVD-2026-54726

In Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series, sensitive key material held by the AES and DESede engines, the SP 800-90A DRBGs, SymmetricSecretKey and the PBKD and scrypt parameter classes was zeroised on garbage collection by...

[SECURITY] [DLA 4724-1] linux-6.12 new package

Debian LTS Advisory DLA-4724-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings August 07, 2026 https://wiki.debian.org/LTS Package : linux-6.12 Version : 6.12.100-1deb12u1 CVE ID : CVE-2025-21807 CVE-2026-45944 CVE-2026-46093 CVE-2026-53005 CVE-2026-53027...

[SECURITY] [DLA 4723-1] linux-6.1 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4723-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 07, 2026 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 4722-1] redis security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4722-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb August 06, 2026 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 4721-1] async-http-client security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4721-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb August 06, 2026 https://wiki.debian.org/LTS -...

Debian dla-4721 : libasync-http-client-java - security update

The remote Debian 11 / 12 host has a package installed that is affected by a vulnerability as referenced in the dla-4721 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4721-1 [email protected]...

Debian dla-4722 : redis - security update

The remote Debian 11 / 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4722 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4722-1 [email protected]...

[SECURITY] [DLA 4720-1] linux security update

Debian LTS Advisory DLA-4720-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings August 05, 2026 https://wiki.debian.org/LTS Package : linux Version : 6.1.180-1 CVE ID : CVE-2024-36013 CVE-2025-40196 CVE-2026-31610 CVE-2026-43216 CVE-2026-46135 CVE-2026-53332...

[SECURITY] [DLA 4717-1] linux security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4717-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 05, 2026 https://wiki.debian.org/LTS -...

Debian dla-4718 : 7zip - security update

The remote Debian 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4718 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4718-1 [email protected]...

PT-2026-68264

Name of the Vulnerable Software and Affected Versions Jenkins versions prior to 2.576 Jenkins LTS versions prior to 2.568.2 Description Inconsistent handling of case-insensitivity in user and group names allows attackers with the ability to create new users or groups to impersonate other users or...

Debian dla-4717 : ata-modules-5.10.0-43-armmp-di - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4717 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4717-1 [email protected]...

CLSA-2026-1784077507 TuxCare security update for multer (1 CVE)

TuxCare rebuilt multer to address 1 CVE. Fixed in 1.4.5-lts.1-tuxcare.5...

CVE-2026-14682

In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up-front allocation on a definite-length read. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X serie...