CLSA-2026-1792157349 TuxCare security update for dompurify (5 CVEs)

TuxCare rebuilt dompurify to address 5 CVEs. Fixed in 3.4.6-tuxcare.2...

CLSA-2026-1792157113 TuxCare security update for dompurify (12 CVEs)

TuxCare rebuilt dompurify to address 12 CVEs. Fixed in 3.0.11-tuxcare.2...

CLSA-2026-1792157013 TuxCare security update for dompurify (13 CVEs)

TuxCare rebuilt dompurify to address 13 CVEs. Fixed in 3.1.0-tuxcare.2...

CLSA-2026-1792156909 TuxCare security update for dompurify (10 CVEs)

TuxCare rebuilt dompurify to address 10 CVEs. Fixed in 3.0.1-tuxcare.2...

CLSA-2026-1792156803 TuxCare security update for dompurify (5 CVEs)

TuxCare rebuilt dompurify to address 5 CVEs. Fixed in 2.3.10-tuxcare.2...

CLSA-2026-1792156694 TuxCare security update for dompurify (11 CVEs)

TuxCare rebuilt dompurify to address 11 CVEs. Fixed in 3.0.8-tuxcare.2...

CLSA-2026-1792156589 TuxCare security update for dompurify (10 CVEs)

TuxCare rebuilt dompurify to address 10 CVEs. Fixed in 3.0.9-tuxcare.2...

CLSA-2026-1792156500 TuxCare security update for dompurify (6 CVEs)

TuxCare rebuilt dompurify to address 6 CVEs. Fixed in 2.0.8-tuxcare.2...

ROOT-OS-DEBIAN-13-CVE-2026-106583 CVE-2026-106583 in openssh - Patched by Root

Root has patched CVE-2026-106583 in the openssh package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-106555 CVE-2026-106555 in openssh - Patched by Root

Root has patched CVE-2026-106555 in the openssh package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-106553 CVE-2026-106553 in openssh - Patched by Root

Root has patched CVE-2026-106553 in the openssh package for Root:Debian:13. Multiple fixed versions available...

CLSA-2026-1792156282 TuxCare security update for dompurify (11 CVEs)

TuxCare rebuilt dompurify to address 11 CVEs. Fixed in 3.1.4-tuxcare.2...

CLSA-2026-1792155956 TuxCare security update for dompurify (5 CVEs)

TuxCare rebuilt dompurify to address 5 CVEs. Fixed in 2.3.3-tuxcare.2...

CLSA-2026-1792155851 TuxCare security update for dompurify (12 CVEs)

TuxCare rebuilt dompurify to address 12 CVEs. Fixed in 3.1.3-tuxcare.2...

ROOT-APP-MAVEN-CVE-2026-107725 CVE-2026-107725 in com.hazelcast:hazelcast - Patched by Root

Root has patched CVE-2026-107725 in the com.hazelcast:hazelcast package for Root:Maven. Multiple fixed versions available...

CLSA-2026-1792155090 TuxCare security update for io.projectreactor (2 CVEs)

TuxCare rebuilt 3 io.projectreactor packages to address 2 CVEs. Fixed in 3.6.6-tuxcare.1...

CLSA-2026-1792154919 Fix CVE(s): CVE-2026-106553, CVE-2026-106555, CVE-2026-106583

SECURITY UPDATE: GSSAPI client state persisting across authentication attempts - debian/patches/CVE-2026-106555.patch: reset the GSSAPI client state at the start of each userauth request and of each pre-authentication GSSAPI context setup in the monitor. - CVE-2026-106555 SECURITY UPDATE: GSSAPI...

CLSA-2026-1792154118 TuxCare security update for dompurify (2 CVEs)

TuxCare rebuilt dompurify to address 2 CVEs. Fixed in 3.4.9-tuxcare.2...

CLSA-2026-1792152610 TuxCare security update for io.projectreactor (2 CVEs)

TuxCare rebuilt 3 io.projectreactor packages to address 2 CVEs. Fixed in 3.6.10-tuxcare.1...

RUSTSEC-2026-0373 Missing case-insensitive matching for CSS url function

URL filtering, such as relative URLs and URL scheme limits, is not always applied when CSS sanitization is used. When the inner URL is quoted, CSS url"" is matched case-sensitively, when it should be matched case-insensitively. As a result, while url"" gets the intended domain name filtering, URL...