CLSA-2026-1789407656 TuxCare security update for log4j:log4j (2 CVEs)

TuxCare rebuilt log4j:log4j to address 2 CVEs. Fixed in 1.2.13-tuxcare.1...

CLSA-2026-1788560406 TuxCare security update for ws (3 CVEs)

TuxCare rebuilt ws to address 3 CVEs. Fixed in 8.13.0-tuxcare.1...

CLEANSTART-2026-FZ96699 Security fixes in postgres-operator 1.13.0-r1

Package postgres-operator version 1.13.0-r1 fixes 3 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-5cgq-3rg8-m6cv, ghsa-rm3j-f69w-wqmq...

CLSA-2026-1786359305 TuxCare security update for swagger-ui (3 CVEs)

TuxCare rebuilt swagger-ui to address 3 CVEs. Fixed in 2.2.10-tuxcare.2...

CLSA-2026-1785914728 TuxCare security update for certifi (2 CVEs)

TuxCare rebuilt certifi to address 2 CVEs. Fixed in 2022.12.7.post3+tuxcare...

CLSA-2026-1783299707 TuxCare security update for org.springframework (3 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 3 CVEs. Fixed in 5.3.7-tuxcare.4...

CLSA-2026-1782694760 TuxCare security update for tmp (1 CVE)

TuxCare rebuilt tmp to address 1 CVE. Fixed in 0.2.3-tuxcare.1...

CLSA-2026-1781571259 TuxCare security update for org.bouncycastle (3 CVEs)

TuxCare rebuilt 12 org.bouncycastle packages to address 3 CVEs. Fixed in 1.64-tuxcare.5...

CLSA-2026-1780620679 TuxCare security update for @angular (1 CVE)

TuxCare rebuilt 6 @angular packages to address 1 CVE. Fixed in 6.0.1-tuxcare.1...

CLSA-2026-1779670106 TuxCare security update for commons-io:commons-io (1 CVE)

TuxCare rebuilt commons-io:commons-io to address 1 CVE. Fixed in 2.4-tuxcare.1...

CLSA-2026-1777596014 TuxCare security update for org.apache.tika (2 CVEs)

TuxCare rebuilt 108 org.apache.tika packages to address 2 CVEs. Fixed in 2.9.4-tuxcare.1...

CLSA-2026-1776299676 TuxCare security update for webpack-dev-middleware (1 CVE)

TuxCare rebuilt webpack-dev-middleware to address 1 CVE. Fixed in 3.4.0-tuxcare.1...

CLSA-2026-1773101688 TuxCare security update for qs (3 CVEs)

TuxCare rebuilt qs to address 3 CVEs. Fixed in 5.2.0-tuxcare.1...

Oracle Linux 10 : libXfont2 (ELSA-2026-47079)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47079 advisory. 2.0.6-5.1 - CVE fix for: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003 Resolves: https://redhat.atlassian.net/browse/RHEL-191882 Resolves:...

PT-2026-48907

The Aqara IAM/SSO Gateway gw-builder.aqara.com used a hardcoded OAuth client credential, which is an instance of "CWE-798: Use of Hard-coded Credentials." This issue has an estimated CVSS of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N 9.1 Critical. When combined with CVE-2026-50082, CVE-50084, a...

CLEANSTART-2026-PK48502 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-68121 applied in versions: 2.3.0-r0

Multiple security vulnerabilities affect the mountpoint-s3-csi-driver package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZR49276 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142 applied in versions: 2.18.0-r0

Multiple security vulnerabilities affect the kubernetes-csi-livenessprobe-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

Security Bulletin: The Network Threat Analytics App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. Network Threat Analytics App for IBM QRadar SIEM has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2023-2454 DESCRIPTION:...

openSUSE Security Advisory (SUSE-SU-2026:0877-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RockyLinux 8 : postgresql:12 (RLSA-2026:4064)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:4064 advisory. postgresql: PostgreSQL missing validation of multibyte character length executes arbitrary code CVE-2026-2006 postgresql: PostgreSQL intarray missing...