CLSA-2026-1792421945 TuxCare security update for @react-router/remix-routes-option-adapter (1 CVE)

TuxCare rebuilt @react-router/remix-routes-option-adapter to address 1 CVE. Fixed in 7.5.1-tuxcare.9...

CLSA-2026-1792421834 thunderbird: Fix of 2 CVEs

CVE-2026-100781: fix out-of-bounds memory access in the SWGL software rasterizer...

CLSA-2026-1792421536 TuxCare security update for handlebars (2 CVEs)

TuxCare rebuilt handlebars to address 2 CVEs. Fixed in 4.5.3-tuxcare.4...

CLSA-2026-1792421347 TuxCare security update for org.springframework.data:spring-data-keyvalue (1 CVE)

TuxCare rebuilt org.springframework.data:spring-data-keyvalue to address 1 CVE. Fixed in 2.7.16-tuxcare.3...

CLSA-2026-1787293144 Fix CVE(s): CVE-2026-31405, CVE-2026-53043, CVE-2026-64564

CVE-2026-64564 - sctp: don't free the ASCONF's own transport in DEL-IP processing CVE-2026-64564 CVE-2026-53043 - ocfs2/dlm: validate qrnumregions in dlmmatchregions CVE-2026-53043 CVE-2026-31405 - media: dvb-net: fix OOB access in ULE extension header tables CVE-2026-31405 Bump ABI 4.15.0-263...

CLSA-2026-1791486224 python: Fix of 3 CVEs

CVE-2026-82049: resolve a hard link's target with os.path.realpath before creating the link, so extracting a hard link to a symlink stored deeper in the archive cannot relocate that symlink to a shallower path where its relative target escapes the destination directory - CVE-2026-11940: re-filter...

CLSA-2026-1791485785 python: Fix of 3 CVEs

CVE-2026-82049: resolve a hard link's target with os.path.realpath before creating the link, so extracting a hard link to a symlink stored deeper in the archive cannot relocate that symlink to a shallower path where its relative target escapes the destination directory - CVE-2026-11940: re-filter...

org.apache.camel.karaf:camel-tika (>=4.7.0, <=4.18.4), org.apache.camel.quarkus:camel-quarkus-integration-test-tika (>=3.2.0, <=3.33.3) +3 more potentially affected by CVE-2026-85249 via org.apache.camel:camel-tika (>=4.0.0, <=4.18.4)

org.apache.camel:camel-tika MAVEN version =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.18.4 Source cves: CVE-2026-85249 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21430112...

io.github.luigidemasi:camel-jbang-plugin-kit (>=0.3.0, <=0.3.1), io.kaoto.forage:camel-jbang-plugin-forage (>=1.0, <=1.4.1) +18 more potentially affected by CVE-2026-85254 via org.apache.camel:camel-platform-http-main (>=4.0.0, <=4.18.4)

org.apache.camel:camel-platform-http-main MAVEN version =4.0.0, =0.3.0, =1.0, =1.0, =4.7.0, =4.11.0, =4.0.0, =4.0.0, =4.18.0, =4.12.0, =4.7.0, =4.4.0, =4.8.0, =4.17.0, =4.14.0, =4.18.0, =4.18.4 and more Source cves: CVE-2026-85254 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21429367...

ai.wanaku.sdk:capabilities-runtimes-camel-common (>=0.1.1, <=0.1.2), ai.wanaku.sdk:capabilities-runtimes-camel-plugin (>=0.1.1, <=0.1.2) +398 more potentially affected by CVE-2026-85250 via org.apache.camel:camel-xpath (>=4.0.0, <=4.18.4)

org.apache.camel:camel-xpath MAVEN version =4.0.0, =0.1.1, =0.1.1, =0.0.1, =0.0.4, =1.1.0, =1.1.0, =1.4.7, =1.4.7, =2.0.0, =1.0.0, =1.4.6, =1.4.7, =2.0.2 and more Source cves: CVE-2026-85250 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21429368...

ai.wanaku.sdk:capabilities-runtimes-camel-common (>=0.2.0, <=0.2.2), ai.wanaku.sdk:capabilities-runtimes-camel-plugin (>=0.2.0, <=0.2.2) +295 more potentially affected by CVE-2026-85250 via org.apache.camel:camel-xpath (>=4.19.0, <=4.22.0)

org.apache.camel:camel-xpath MAVEN version =4.19.0, =0.2.0, =0.2.0, =2.110.0, =2.74.0, =4.0.0, =3.2.1, =3.2.1, =3.2.1, =3.2.1, =3.2.1, =0.11.0, =1.1.0, =1.2.0 - io.hawt.examples:hawtio-example-springboot 5.3.0 and more Source cves: CVE-2026-85250 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21429368...

org.apache.camel.karaf:camel-mllp (>=4.7.0, <=4.18.4), org.apache.camel.quarkus:camel-quarkus-integration-test-mllp (>=3.2.0, <=3.33.3) +3 more potentially affected by CVE-2026-85260 via org.apache.camel:camel-mllp (>=4.0.0, <=4.18.4)

org.apache.camel:camel-mllp MAVEN version =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =4.18.4 Source cves: CVE-2026-85260 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21429380...

com.cefriel:camel-chimera-graph (4.6.1), com.cefriel:camel-chimera-mapping-template (4.6.1) +42 more potentially affected by CVE-2026-85317 via org.apache.camel:camel-http (>=4.19.0, <=4.22.0)

org.apache.camel:camel-http MAVEN version =4.19.0, =3.2.1, =3.2.1, =3.2.1, =3.2.1, =4.1.0 - org.apache.camel.kafkaconnector:camel-chuck-norris-source-kafka-connector 4.22.0 - org.apache.camel.kafkaconnector:camel-earthquake-source-kafka-connector 4.22.0 -...

ai.wanaku:wanaku-routing-http-service (>=0.0.1, <=0.0.3), ai.wanaku:wanaku-routing-yaml-route-service (>=0.0.1, <=0.0.3) +58 more potentially affected by CVE-2026-85317 via org.apache.camel:camel-http (>=4.0.0, <=4.18.4)

org.apache.camel:camel-http MAVEN version =4.0.0, =0.0.1, =0.0.1, =0.0.4, =0.0.4, =4.0.1, =4.0.1, =4.0.1, =3.2.0, =3.2.0, =3.2.0, =2.0.1, =2.0.1, =2.0.1, =2.0.1, =3.1.2 - io.dscope.camel:ag-ui-yaml-service 1.0.0 and more Source cves: CVE-2026-85317 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-214293...

org.apache.camel.karaf:camel-grpc (>=4.7.0, <=4.18.4), org.apache.camel.quarkus:camel-quarkus-grpc (>=3.2.0, <=3.33.3) +5 more potentially affected by CVE-2026-85315 via org.apache.camel:camel-grpc (>=4.0.0, <=4.18.4)

org.apache.camel:camel-grpc MAVEN version =4.0.0, =4.7.0, =3.2.0, =3.2.0, =3.2.0, =4.0.0, =0.1.9, =0.1.6, =2025.1.0.0 Source cves: CVE-2026-85315 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21429389...

com.codbex.atlas:codbex-atlas-application (>=2.110.0, <=14.56.0), com.codbex.iapetus:codbex-iapetus-application (>=2.74.0, <=2.76.0) +73 more potentially affected by CVE-2026-85316 via org.apache.camel:camel-platform-http (>=4.19.0, <=4.22.0)

org.apache.camel:camel-platform-http MAVEN version =4.19.0, =2.110.0, =2.74.0, =3.2.1, =3.2.1, =3.2.1, =3.2.1, =1.5.0, =3.38.0, =3.38.0, =3.38.0, =3.35.0, =3.35.0, =3.39.0 and more Source cves: CVE-2026-85316 Source advisory:...

ai.wanaku:wanaku-routing-yaml-route-service (>=0.0.1, <=0.0.3), ai.wanaku:wanaku-tool-service-yaml-route (>=0.0.4, <=0.0.7) +81 more potentially affected by CVE-2026-85316 via org.apache.camel:camel-platform-http (>=4.0.0, <=4.18.4)

org.apache.camel:camel-platform-http MAVEN version =4.0.0, =0.0.1, =0.0.4, =1.1.0, =1.1.0, =2.0.1, =4.0.0, =2.0.1, =0.3.0, =1.0, =1.0, =0.7.1, =0.7.1, =0.7.1, =3.2.0, =3.15.3 and more Source cves: CVE-2026-85316 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21429411...

io.kaoto.forage:forage-security-keycloak (>=1.3, <=1.4.1), org.apache.camel.karaf:camel-keycloak (>=4.18.1, <=4.18.4) +4 more potentially affected by CVE-2026-85301 via org.apache.camel:camel-keycloak (>=4.15.0, <=4.18.4)

org.apache.camel:camel-keycloak MAVEN version =4.15.0, =1.3, =4.18.1, =3.31.0, =3.29.0, =3.29.0, =4.15.0, =4.18.4 Source cves: CVE-2026-85301 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21429428...

io.automatiko.addons.services:automatiko-receive-email-addon (>=0.53.0, <=0.56.0), org.apache.camel.kafkaconnector:camel-mail-imap-source-kafka-connector (4.22.0) +11 more potentially affected by CVE-2026-85314 via org.apache.camel:camel-mail (>=4.19.0, <=4.22.0)

org.apache.camel:camel-mail MAVEN version =4.19.0, =0.53.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.19.0, =4.19.0, =4.0.0, =4.4.0 Source cves: CVE-2026-85314 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21430136...

io.automatiko.addons.services:automatiko-receive-email-addon (>=0.32.0, <=0.52.0), org.apache.camel.kafkaconnector:camel-mail-imap-source-kafka-connector (>=4.0.0, <=4.18.0) +15 more potentially affected by CVE-2026-85314 via org.apache.camel:camel-mail (>=4.0.0, <=4.18.4)

org.apache.camel:camel-mail MAVEN version =4.0.0, =0.32.0, =4.0.0, =4.0.0, =4.7.0, =3.2.0, =3.8.0, =3.2.0, =3.2.0, =3.8.0, =3.8.0, =4.0.0, =4.0.0, =4.0.0, =4.18.4 - org.nhind:direct-msg-monitor 9.0.0 - org.nhind:direct-msg-monitor-sboot 9.0.0 and more Source cves: CVE-2026-85314 Source advisory:...