CLSA-2026-1790853485 TuxCare security update for 22 packages (1 CVE)

TuxCare rebuilt 22 packages to address 1 CVE. Fixed in 15.5.25-tuxcare.1...

CLSA-2026-1790853416 TuxCare security update for io.netty (4 CVEs)

TuxCare rebuilt 47 io.netty packages to address 4 CVEs. Fixed in 4.1.107.Final-tuxcare.2...

ROOT-APP-MAVEN-CVE-2024-38808 CVE-2024-38808 in org.springframework:spring-expression - Patched by Root

Root has patched CVE-2024-38808 in the org.springframework:spring-expression package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2024-38820 CVE-2024-38820 in org.springframework:spring-web - Patched by Root

Root has patched CVE-2024-38820 in the org.springframework:spring-web package for Root:Maven. Multiple fixed versions available...

CLSA-2026-1790851862 TuxCare security update for sentence-transformers (1 CVE)

TuxCare rebuilt sentence-transformers to address 1 CVE. Fixed in 2.7.0.post3+tuxcare...

ROOT-APP-NPM-CVE-2026-46490 CVE-2026-46490 in samlify - Patched by Root

Root has patched CVE-2026-46490 in the samlify package for Root:npm. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-10050 CVE-2026-10050 in org.eclipse.jetty:jetty-security - Patched by Root

Root has patched CVE-2026-10050 in the org.eclipse.jetty:jetty-security package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-AIKIDO-2026-61483 AIKIDO-2026-61483 in org.springframework.security:spring-security-oauth2-jose - Patched by Root

Root has patched AIKIDO-2026-61483 in the org.springframework.security:spring-security-oauth2-jose package for Root:Maven. Multiple fixed versions available...

CLSA-2026-1790850263 TuxCare security update for 10 packages (1 CVE)

TuxCare rebuilt 10 packages to address 1 CVE. Fixed in 15.1.2-tuxcare.1...

ROOT-OS-DEBIAN-13-CVE-2026-88372 CVE-2026-88372 in libsndfile - Patched by Root

Root has patched CVE-2026-88372 in the libsndfile package for Root:Debian:13. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-40981 CVE-2026-40981 in org.springframework.cloud:spring-cloud-config-server - Patched by Root

Root has patched CVE-2026-40981 in the org.springframework.cloud:spring-cloud-config-server package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-22739 CVE-2026-22739 in org.springframework.cloud:spring-cloud-config-server - Patched by Root

Root has patched CVE-2026-22739 in the org.springframework.cloud:spring-cloud-config-server package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-41002 CVE-2026-41002 in org.springframework.cloud:spring-cloud-config-server - Patched by Root

Root has patched CVE-2026-41002 in the org.springframework.cloud:spring-cloud-config-server package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-59901 CVE-2026-59901 in io.netty:netty-codec - Patched by Root

Root has patched CVE-2026-59901 in the io.netty:netty-codec package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-44249 CVE-2026-44249 in io.netty:netty-handler - Patched by Root

Root has patched CVE-2026-44249 in the io.netty:netty-handler package for Root:Maven. Multiple fixed versions available...

BIT-PHP-2025-1218 Various packet overreads in mysqlnd_writeprotocol.c

The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a truncated packet and make the client read past the end of the packet buffer, which is undefined behaviour and c...

BIT-LIBPHP-2026-91765 SOAP: Unbounded Recursion in Server-Side cleanup_xml_node

cleanupxmlnode in the SOAP XML parser recurses once per XML nesting level with no depth limit. An unauthenticated attacker can post a SOAP request containing tens of thousands of nested elements to any SoapServer endpoint, exhaust the stack and crash the process. The same unbounded recursion exis...

BIT-DOTNET-SDK-2026-69806 .NET Elevation of Privilege Vulnerability

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally...

BIT-DOTNET-2026-69806 .NET Elevation of Privilege Vulnerability

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally...

CLSA-2026-1790846524 TuxCare security update for tornado (1 CVE)

TuxCare rebuilt tornado to address 1 CVE. Fixed in 5.1.1.post6+tuxcare...