CVE-2023-45023

femanager (version 7, before 7.2.2 ) is a TYPO3 extension used for frontend user account management. The vulnerability stems from a missing permission check in the invitation component , allowing a remote user with low privileges to create frontend user accounts with access to configured frontend...

CVE-2023-24288

Simon Tatham's Portable Puzzle Collection (sgt-puzzles) is vulnerable to a buffer overrun triggered by a crafted save file, which can lead to Denial of Service . The vulnerability affects versions before 20230116.5782e29 . The CVSS 3.1 score is 2.9 (LOW) , with a local attack vector, high complex...

CVE-2023-24285

Portable Puzzle Collection (sgt-puzzles) versions before 20230116.5782e29 contain a buffer overflow in the Netslide puzzle , triggered when a crafted save file executes an unusually long move. The vulnerability can cause an integer or buffer overflow, leading to a low-impact availability loss (cr...

rust security update

1.92.0-2 - Apply libgit2 fix for CVE-2026-53587...

ALSA-2026:67155 Moderate: perl security update

Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fixes: perl: Perl: Incorrect regular expression processing via large regular expressions CVE-2026-13221 For more details about the security issues, including the impac...

openssl security, bug fix, and enhancement update

3.5.8-1.0.1 - Replace upstream references Orabug: 34340177 3.5.8.openela.0.1 - Add OpenELA specific changes 1:3.5.8-1 - Rebase to OpenSSL 3.5.8 Resolves: RHEL-242945 Resolves: RHEL-246260 Resolves: RHEL-246284 Resolves: RHEL-246319 Resolves: RHEL-246439 Resolves: RHEL-246443 Resolves: RHEL-246447...

About the security content of macOS Golden Gate 27

About the security content of macOS Golden Gate 27 This document describes the security content of macOS Golden Gate 27. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

About the security content of tvOS 27

About the security content of tvOS 27 This document describes the security content of tvOS 27. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent...

tomcat-9.0.121-1.1 on GA media (moderate)

tomcat-9.0.121-1.1 on GA media Announcement ID: openSUSE-SU-2026:11759-1 Rating: moderate Cross-References: CVE-2026-65182 CVE-2026-65183 CVE-2026-65637 CVE-2026-65905 CVE-2026-65927 CVE-2026-66299 CVE-2026-66422 CVE-2026-68525 CVE-2026-68569 CVE-2026-68763 CVE-2026-73180 CVSS scores:...

CVE-2023-32803

The ca-certificates package on Amazon Linux 2 , Amazon Linux 2023 , and Amazon Linux AMI failed to properly remove certain TrustCor root certificates from the trust store. The flaw stems from an incorrect initial fix for CVE-2022-23491 . A remote attacker could potentially leverage the unremoved ...

CVE-2023-37366

CVE-2023-37366 is a remote denial-of-service vulnerability in Samsung Exynos mobile, automotive, and modem processors (including Exynos 9810 through 2200, Modem 5123/5300, and Auto T5123). The root cause is in cd_parseMsg (file cd_codec.c) within the Shannon SM Task, where improper input validati...

CVE-2023-46035

CVE-2023-46035 affects the svg_optimizer Ruby gem (versions before 0.3.0 , specifically v0.2.6), an SVG optimization library based on Node's SVGO. The vulnerability is an XML External Entity (XXE) injection caused by allowing entity expansion by default when parsing untrusted SVG documents. A rem...

python-tornado security update

6.5.8-0.1 - Update to 6.5.8 Resolves: RHEL-247266...

rust security update

1.92.0-2 - Apply libgit2 fix for CVE-2026-53587...

CVE-2023-50462

The Content Consent (content_consent) extension for TYPO3 , versions through 2.0.1 , suffers from an Insecure Direct Object Reference (IDOR) . The plugin fails to verify whether a specified content element identifier is permitted, allowing an unauthenticated user to display various content elemen...

ALSA-2026:67314 Important: nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 For more details about the security issues, including the impac...

About the security content of iOS 26.7 and iPadOS 26.7

About the security content of iOS 26.7 and iPadOS 26.7 This document describes the security content of iOS 26.7 and iPadOS 26.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

CVE-2023-24286

sgt-puzzles (Portable Puzzle Collection) versions before 20230116.5782e29 contain a buffer overflow in the Mosaic puzzle , triggerable via a crafted save file (game description parameter). The vulnerability carries a CVSS 3.1 score of 2.9 (LOW) , with a local attack vector, high complexity, and l...

openssl security, bug fix, and enhancement update

3.5.8-1.0.1 - Replace upstream references Orabug: 34340177 - Update FIPS provider name Orabug: 35824276 1:3.5.8-1 - Rebase to OpenSSL 3.5.8 Resolves: RHEL-242944 Resolves: RHEL-246254 Resolves: RHEL-246266 Resolves: RHEL-246306 Resolves: RHEL-246437 Resolves: RHEL-246441 Resolves: RHEL-246445...

Oracle Linux 9 : ELSA-2026-67165-0: / openssl (ELSA-2026-671650)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-671650 advisory. 3.5.8-1.0.1 - Replace upstream references Orabug: 34340177 3.5.8.openela.0.1 - Add OpenELA specific changes 1:3.5.8-1 - Rebase to OpenSSL 3.5.8...