CLSA-2026-1791220396 TuxCare security update for 13 packages (1 CVE)

TuxCare rebuilt 13 packages to address 1 CVE. Fixed in 6.0.17.Final-tuxcare.2...

0g-aura (>=0.1.0, <=0.4.31), 0g-kit (>=1.0.0, <=1.0.9) +16353 more potentially affected by CVE-2026-102282 via adm-zip (>=0.1.4, <=0.6.0)

adm-zip NPM version =0.1.4, =0.1.0, =1.0.0, =0.1.0, =0.2.9, =3.0.0-rc.0, =1.125.0, =1.2.2, =1.0.0, =1.0.0, =1.0.1, =1.0.10 and more Source cves: CVE-2026-102282 Source advisory: MEND:CVE-2026-102282...

CLSA-2026-1791217857 TuxCare security update for org.springframework (10 CVEs)

TuxCare rebuilt 21 org.springframework packages to address 10 CVEs. Fixed in 4.3.25.RELEASE-tuxcare.6...

CLSA-2026-1791215922 TuxCare security update for brace-expansion (1 CVE)

TuxCare rebuilt brace-expansion to address 1 CVE. Fixed in 2.1.4-tuxcare.1...

CLSA-2026-1791215851 TuxCare security update for brace-expansion (1 CVE)

TuxCare rebuilt brace-expansion to address 1 CVE. Fixed in 5.0.9-tuxcare.1...

CLSA-2026-1791215768 TuxCare security update for brace-expansion (1 CVE)

TuxCare rebuilt brace-expansion to address 1 CVE. Fixed in 5.0.5-tuxcare.1...

CLSA-2026-1791213084 TuxCare security update for org.springframework (25 CVEs)

TuxCare rebuilt 21 org.springframework packages to address 25 CVEs. Fixed in 4.3.26.RELEASE-tuxcare.1...

CLSA-2026-1791208774 TuxCare security update for image-size (2 CVEs)

TuxCare rebuilt image-size to address 2 CVEs. Fixed in 2.0.2-tuxcare.1...

CLSA-2026-1791208360 TuxCare security update for nanoid (1 CVE)

TuxCare rebuilt nanoid to address 1 CVE. Fixed in 5.1.5-tuxcare.1...

SUSE-SU-2026:4494-1 Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues: - CVE-2026-78807: Security bypass via missing PMKSA validation bsc1280914. - Fixed incomplete RADIUS Message-Authenticator attribute validation in hostapd...

CLSA-2026-1791205000 TuxCare security update for commons-configuration:commons-configuration (1 CVE)

TuxCare rebuilt commons-configuration:commons-configuration to address 1 CVE. Fixed in 1.10-tuxcare.3...

CLSA-2026-1791202982 TuxCare security update for @angular (1 CVE)

TuxCare rebuilt 2 @angular packages to address 1 CVE. Fixed in 19.2.25-tuxcare.6...

DEBIAN-CVE-2026-63270

URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links. The check added for CVE-2024-12426 did not cover every place a document can supply a URL...

CLSA-2026-1791202437 TuxCare security update for @angular/language-service (1 CVE)

TuxCare rebuilt @angular/language-service to address 1 CVE. Fixed in 19.2.14-tuxcare.4...

CLSA-2026-1791201412 TuxCare security update for brace-expansion (1 CVE)

TuxCare rebuilt brace-expansion to address 1 CVE. Fixed in 5.0.8-tuxcare.1...

CLSA-2026-1791201400 TuxCare security update for h3 (1 CVE)

TuxCare rebuilt h3 to address 1 CVE. Fixed in 1.15.11-tuxcare.1...

CLSA-2026-1791201398 TuxCare security update for shell-quote (2 CVEs)

TuxCare rebuilt shell-quote to address 2 CVEs. Fixed in 1.8.1-tuxcare.2...

Astra Linux – Vulnerability in sdl-image1.2

SDLimage is a library for loading images of various formats as SDL surfaces. In the dolayersurface function in src/IMGxcf.c, pixel index values from decoded XCF tile data are used directly as colormap indices without being validated against the colormap size cmnum. A crafted .xcf file with a smal...

Astra Linux – Vulnerability in Chromium

Uninitialized use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Uninitialized use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...