Security Bulletin: Multiple security vulnerabilities may affect IBM Java that is shipped with TXSeries for Multiplatforms

Summary Multiple security vulnerabilities may affect IBM Java that is shipped with TXSeries for Multiplatforms CVE-2026-22016, CVE-2026-22021, CVE-2026-22013, CVE-2026-22018, CVE-2026-34268, CVE-2026-22007. An update to TXSeries for Multiplatforms has been released to address these vulnerabilitie...

GHSA-7PHF-QPM5-Q6P3 vulnerabilities

Vulnerabilities for packages: openssl...

GHSA-VC8W-W49C-4JGJ vulnerabilities

Vulnerabilities for packages: openssl...

GHSA-M6W2-P258-GXQP vulnerabilities

Vulnerabilities for packages: samba...

[SECURITY] [DSA 6341-1] ironic security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6341-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 11, 2026 https://www.debian.org/security/faq -...

Security update for hplip

This update for hplip fixes the following issues Update to HPLIP 3.26.4: Security issues: CVE-2025-43023: weak code signing DSA key used to generate package signatures can lead to key spoofing and malicious software installation bsc1266031. CVE-2026-8631: escalation of privileges and/or arbitrary...

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues Update to version 2.52.4: CVE-2026-28847: processing maliciously crafted web content may lead to an unexpected process crash or arbitrary code execution due to a heap buffer overflow bsc1267506. CVE-2026-28883: processing maliciously crafted...

RHSA-2026:25198 Red Hat Security Advisory: libsndfile security update

Bulletin has no description...

GHSA-HFXV-24RG-XRQF vulnerabilities

Vulnerabilities for packages: awx, opensearch-dashboards-fips, gitlab-rails-ce-fips, wazuh-dashboard, kubeflow-katib, gitlab-rails-ce, wazuh-dashboard-fips, opensearch-dashboards, nextcloud-server...

GHSA-8P34-64R3-MWG8 vulnerabilities

Vulnerabilities for packages: logstash, ruby3.2-rails, ruby4.0-rails, gitlab-rails-ce-fips, jruby, gitlab-rails-ce, ruby3.3-rails, logstash-fips, truffleruby, kube-fluentd-operator, kube-logging-operator, ruby3.4-rails...

Updated roundcubemail packages fix security vulnerabilities

Multiple security vulnerabilities were discovered in RoundCube Webmail, which could result in cross-site scripting, SQL injection, SSRF bypass, information disclosure, denial of service or code injection...

CLEANSTART-2026-EG39405 Netty is an asynchronous, event-driven network application framework

Multiple security vulnerabilities affect the trino package. Netty is an asynchronous, event-driven network application framework. See references for individual vulnerability details...

CLEANSTART-2026-BM78291 Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU

Multiple security vulnerabilities affect the dex package. Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU. See references for individual vulnerability details...

CLEANSTART-2026-AO11810 Netty is an asynchronous, event-driven network application framework

Multiple security vulnerabilities affect the apache-zookeeper package. Netty is an asynchronous, event-driven network application framework. See references for individual vulnerability details...

CLEANSTART-2026-YM13650 Netty is an asynchronous, event-driven network application framework

Multiple security vulnerabilities affect the apache-zookeeper package. Netty is an asynchronous, event-driven network application framework. See references for individual vulnerability details...

CLEANSTART-2026-LO88261 Within HostnameError

Multiple security vulnerabilities affect the eck-operator package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2026-GU65783 Within HostnameError

Multiple security vulnerabilities affect the eck-operator package. Within HostnameError. See references for individual vulnerability details...

Oracle Linux 7 : freerdp (ELSA-2026-11323)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-11323 advisory. - Fixed CVE-2026-22852 CVE-2026-22854 CVE-2026-22856 CVE-2026-23732 CVE-2026-23948 CVE-2026-24491 CVE-2026-24675 CVE-2026-24676 CVE-2026-24679...

VMware Spring Web Services 安全漏洞

VMware Spring Web Services is a SOAP Web services development framework provided by the American company VMware. There are security vulnerabilities in versions 5.0.0 to 5.0.1, 4.1.0 to 4.1.3, 4.0.0 to 4.0.18, and 3.1.0 to 3.1.8 of VMware Spring Web Services. These vulnerabilities stem from...

axios 输入验证错误漏洞

Axios is an open-source HTTP client developed by Axios. Versions of Axios from 1.0.0 to 1.16.0 had security vulnerabilities. These vulnerabilities were caused by prototype pollution attacks, which could lead to the Object.prototype in the application dependency tree being polluted, resulting in...