184 matches found
Security Bulletin: Vulnerability in tar affects IBM Netezza Appliance
Summary The tar package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2026-59873 Vulnerability Details CVEID:CVE-2026-59873 DESCRIPTION: node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.19, node-tar does not enforce hard uppe...
CLSA-2026-1784856192 TuxCare security update for serve-static (1 CVE)
TuxCare rebuilt serve-static to address 1 CVE. Fixed in 1.10.3-tuxcare.1...
CLSA-2026-1784596332 TuxCare security update for rollup (1 CVE)
TuxCare rebuilt rollup to address 1 CVE. Fixed in 0.59.4-tuxcare.1...
CLSA-2026-1782521951 TuxCare security update for axios (17 CVEs)
TuxCare rebuilt axios to address 17 CVEs. Fixed in 0.19.2-tuxcare.1...
CLSA-2026-1775262615 TuxCare security update for lodash (3 CVEs)
TuxCare rebuilt lodash to address 3 CVEs. Fixed in 4.17.15-tuxcare.5...
CLSA-2026-1774657373 TuxCare security update for jsonwebtoken (1 CVE)
TuxCare rebuilt jsonwebtoken to address 1 CVE. Fixed in 0.4.1-tuxcare.1...
CLEANSTART-2026-XB91017 Security fixes in curl 8.12.0-r0
Package curl version 8.12.0-r0 fixes 3 vulnerabilities: CVE-2025-0167, CVE-2025-0665, CVE-2025-0725...
CLEANSTART-2026-GT46159 Security fixes in tomcat11 9.0.71-r0
Package tomcat11 version 9.0.71-r0 fixes 1 vulnerabilities: CVE-2023-24998...
CLEANSTART-2026-YB99033 Security fixes in velero-fips 1.17.2-r4
Package velero-fips version 1.17.2-r4 fixes 1 vulnerabilities: CVE-2026-34986...
CLEANSTART-2026-TX39547 Security fixes in curl 7.50.3-r0
Package curl version 7.50.3-r0 fixes 1 vulnerabilities: CVE-2016-7167...
CLEANSTART-2026-TB76607 Security fixes in step 0.28.7-r0
Package step version 0.28.7-r0 fixes 1 vulnerabilities: CVE-2025-62820...
OESA-2026-3126 ImageMagick security update
Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...
UBUNTU-CVE-2026-64009
In the Linux kernel, the following vulnerability has been resolved: xfrm: Check for underflow in xfrmstatemtu Leo Lin reported OOB write issue in esp component: xfrmstatemtu returns u32 but performs its arithmetic in unsigned modulo-2^32 space using an attacker-influenced "headerlen + authsize +...
UBUNTU-CVE-2026-63797
In the Linux kernel, the following vulnerability has been resolved: rpmsg: char: Fix use-after-free on probe error path rpmsgchrdevprobe stores the newly allocated eptdev in the default endpoint's priv pointer before calling rpmsgchrdeveptdevadd. If rpmsgchrdeveptdevadd then fails, its error path...
UBUNTU-CVE-2026-59888
jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.15.0 until 2.18.8, 2.21.4, and 3.1.4, Java Records using a PropertyNamingStrategy can bypass @JsonIgnore because POJOPropertiesCollector.removeUnwantedIgnorals records an...
CVE-2026-59874 node-tar: Negative tar entry size causes infinite loop in archive replace
node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, tar.replace accepts a checksum-valid tar header with a negative base-256 encoded entry size, causing the archive scanner to make no progress while repeatedly parsing the same header. This issue is fixed in version 7.5.18...
UBUNTU-CVE-2026-42389
This fix provides extra hardening for the 5.4.x branch by doing extra validation of incoming answers from authoritative servers...
UBUNTU-CVE-2026-52992
In the Linux kernel, the following vulnerability has been resolved: fs/adfs: validate nzones in adfsvalidatebblk Reject ADFS disc records with a zero zone count during boot block validation, before the disc record is used. When nzones is 0, adfsreadmap passes it to kmallocarray0, ... which return...
PT-2026-49552
Name of the Vulnerable Software and Affected Versions ws versions 1.1.0 through 5.2.4 ws versions 6.0.0 through 6.2.3 ws versions 7.0.0 through 7.5.10 ws versions 8.0.0 through 8.20.9 Description ws is an open source WebSocket client and server for Node.js. A peer can send a high volume of...