ROS-20260819-73-0056

The vulnerability in Tomcat is related to the implementation of incorrect control flow. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

php8.4 security, bug fix, and enhancement update

8.4.24-2 - rebase to 8.4.24...

ROS-20260819-73-0050

The vulnerability in Tomcat is related to the implementation of incorrect control flow. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

ROS-20260819-73-0052

The vulnerability in Tomcat11 is related to the implementation of incorrect control flow. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

ROS-20260819-73-0060

The vulnerability in Tomcat10 is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers, who operate remotely, to gain increased privileges...

ROS-20260819-73-0053

The vulnerability in Tomcat is related to deficiencies in handling error situations. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

ROS-20260819-73-0004

The vulnerability in gobgp is related to the assignment of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-74987

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or...

Linux Distros Unpatched Vulnerability : CVE-2026-23933

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Zabbix 7.4 the cryptographic key used for signing Frontend sessions has been erroneously written to the database seed. Currently the only known exploitation...

yggdrasil security update

0.4.9.2-2 - Rebuild yggdrasil against updated golang...

ROS-20260819-73-0037

The vulnerability in Vim is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260819-73-0058

The vulnerability in Tomcat11 is related to the implementation of incorrect control flow. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

CVE-2026-54284 vulnerabilities

Vulnerabilities for packages: openstack-glance-2026.1, airflow-postgres-fips, openstack-keystone-2025.1-fips, apache-beam-python-3.14-sdk, authentik, openstack-horizon-2026.1-fips, mycli, netbox, pgadmin4-fips, openstack-horizon-2025.2, openstack-nova-2026.1, datahub-ingestion, mlflow,...

GHSA-PWGV-4X5Q-6M9F vulnerabilities

Vulnerabilities for packages: openstack-glance-2026.1, airflow-postgres-fips, openstack-keystone-2025.1-fips, apache-beam-python-3.14-sdk, authentik, openstack-horizon-2026.1-fips, mycli, netbox, pgadmin4-fips, openstack-horizon-2025.2, openstack-nova-2026.1, datahub-ingestion, mlflow,...

GHSA-PRG7-HCFM-MFCR vulnerabilities

Vulnerabilities for packages: openstack-glance-2026.1, airflow-postgres-fips, openstack-keystone-2025.1-fips, apache-beam-python-3.14-sdk, authentik, openstack-horizon-2026.1-fips, mycli, netbox, pgadmin4-fips, openstack-horizon-2025.2, openstack-nova-2026.1, datahub-ingestion, mlflow,...

CVE-2026-59894 vulnerabilities

Vulnerabilities for packages: openstack-glance-2026.1, airflow-postgres-fips, openstack-keystone-2025.1-fips, apache-beam-python-3.14-sdk, authentik, openstack-horizon-2026.1-fips, mycli, netbox, pgadmin4-fips, openstack-horizon-2025.2, openstack-nova-2026.1, datahub-ingestion, mlflow,...

CVE-2026-54876 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

GHSA-8C42-7QJ2-3J46 vulnerabilities

Vulnerabilities for packages: druid, conductor-fips, traccar, strimzi-kafka-operator, opensearch-fips, apicurio-registry-fips, cruise-control-fips, management-api-for-apache-cassandra-5.0, kafbat-ui-fips, camunda, seata, elasticsearch-fips, hono, opensearch, flyway-fips, metabase, kayenta,...

CVE-2026-59903 vulnerabilities

Vulnerabilities for packages: druid, conductor-fips, traccar, strimzi-kafka-operator, opensearch-fips, apicurio-registry-fips, cruise-control-fips, management-api-for-apache-cassandra-5.0, kafbat-ui-fips, camunda, seata, elasticsearch-fips, hono, opensearch, flyway-fips, metabase, kayenta,...

CVE-2026-17106

The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers do not confine filesystem operations to the destination directory. The extractor decides where each archive entry lands using lexical string checks and then performs the...