OPENSUSE-SU-2026:21823-1 Security update for tomcat

This update for tomcat fixes the following issues: - CVE-2026-65182: Bypass longest prefix security constraint bsc1276893. - CVE-2026-65183: TOCTOU when setting specific permissions for Unix Domain Sockets bsc1276894. - CVE-2026-65637: HTTP/2 no-authority bypass of strict SNI validation - fix...

CLSA-2026-1788935722 TuxCare security update for aiohttp (2 CVEs)

TuxCare rebuilt aiohttp to address 2 CVEs. Fixed in 3.8.5.post13+tuxcare...

OPENSUSE-SU-2026:21816-1 Security update for hauler

This update for hauler fixes the following issues: Changes in hauler: Update to 2.1.0 bsc1265425, CVE-2026-41888, bsc1278584, CVE-2026-56855,CVE-2026-56854,CVE-2026-78662,...

EUVD-2026-74954

tirreno, a security framework, has a session fixation issue in versions prior to 0.10.0. During authentication, tirreno validates the user's credentials and establishes the authenticated session, but it does not call sessionregenerateid afterward. As a result, the session identifier is not rotate...

CVE-2026-64857 tirreno has Session Fixation in Login Authentication

tirreno, a security framework, has a session fixation issue in versions prior to 0.10.0. During authentication, tirreno validates the user's credentials and establishes the authenticated session, but it does not call sessionregenerateid afterward. As a result, the session identifier is not rotate...

CVE-2026-64857 tirreno has Session Fixation in Login Authentication

tirreno, a security framework, has a session fixation issue in versions prior to 0.10.0. During authentication, tirreno validates the user's credentials and establishes the authenticated session, but it does not call sessionregenerateid afterward. As a result, the session identifier is not rotate...

CVE-2026-79968

creationtimestamp| type| source ---|---|--- 2026-09-09 13:40:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/abptozoryekrg...

CLSA-2026-1788960805 TuxCare security update for 12 packages (3 CVEs)

TuxCare rebuilt 12 packages to address 3 CVEs. Fixed in 7.5.1-tuxcare.10...

CLSA-2026-1788960197 TuxCare security update for 13 packages (1 CVE)

TuxCare rebuilt 13 packages to address 1 CVE. Fixed in 2.18.1-tuxcare.5...

CVE-2026-85102

Check Point Security Gateway and Spark Firewall are vulnerable to a critical issue (CVSS 9.8 ) caused by improper certificate trust validation during VPN negotiation . An unauthenticated remote attacker can bypass authentication checks to execute arbitrary code on the Gateway. The flaw affects Si...

CVE-2026-85102 Improper Certificate Validation in Quantum Security Gateway

Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway...

CVE-2026-85102 Improper Certificate Validation in Quantum Security Gateway

Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway...

CLSA-2026-1788956475 TuxCare security update for jquery (6 CVEs)

TuxCare rebuilt jquery to address 6 CVEs. Fixed in 1.3.2-tuxcare.1...

buildah security update

An update is available for buildah. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The buildah package provides a tool for facilitating building OCI container...

skopeo security update

An update is available for skopeo. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The skopeo command lets you inspect images from container image registries, g...

RLSA-2026:64775 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: can: bcm: add locking for bcmop runtime updates CVE-2025-38004 kernel: ipv6: add NULL checks for idev in SRv6 paths CVE-2026-23442 kernel: udp: Fix wildcard bind conflict check when using...

CVE-2026-87827

creationtimestamp| type| source ---|---|--- 2026-09-09 12:07:26+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv3isw4svy2p 2026-09-09 22:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv4lmcy7p52j 2026-09-10 12:00:41+00:00| exploited|...

kernel security update

An update is available for kernel. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

CLSA-2026-1788955035 TuxCare security update for 4 packages (1 CVE)

TuxCare rebuilt 4 packages to address 1 CVE. Fixed in 6.3.0-tuxcare.2...

CVE-2026-76202

creationtimestamp| type| source ---|---|--- 2026-09-09 11:49:09+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mv3hs62yqe2t 2026-09-13 16:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvfzqtnhay2j...