468740 matches found
Astra Linux – Vulnerability in PostgresSQL 11
An information leak was discovered in PostgreSQL versions prior to 13.2, before 12.6, and before 11.11. A user with UPDATE permission but without SELECT permission for a specific column could create queries that, under certain circumstances, might reveal values from that column in error messages...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fixed a possible use-after-free during activity updates. The “rule activity update” process periodically traverses a list of configured rules and queries their activity from the device. As part of this...
Astra Linux – Vulnerability in Firefox
A use-after-free crash could occur on macOS if a Firefox update was applied to a heavily utilized system. This could lead to a exploitable crash. This vulnerability affects Firefox versions earlier than 122...
CLSA-2026-1789387099 TuxCare security update for io.netty (9 CVEs)
TuxCare rebuilt 47 io.netty packages to address 9 CVEs. Fixed in 4.1.93.Final-tuxcare.4...
CLSA-2026-1789384929 TuxCare security update for cakephp/cakephp (1 CVE)
TuxCare rebuilt cakephp/cakephp to address 1 CVE. Fixed in 2.10.24-p3+tuxcare...
CLSA-2026-1789384773 TuxCare security update for zendframework/zend-view (1 CVE)
TuxCare rebuilt zendframework/zend-view to address 1 CVE. Fixed in 2.1.6-p1+tuxcare...
CLSA-2026-1789384355 TuxCare security update for 204 packages (1 CVE)
TuxCare rebuilt 204 packages to address 1 CVE. Fixed in 2.28.0-tuxcare.1...
Moderate: Red Hat Security Advisory: perl:5.32 security update
An update for the perl:5.32 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
CLSA-2026-1789383190 TuxCare security update for org.apache.httpcomponents.core5 (2 CVEs)
TuxCare rebuilt 5 org.apache.httpcomponents.core5 packages to address 2 CVEs. Fixed in 5.1.5-tuxcare.1...
CVE-2026-9812 Missing property field ownership validation in Playbooks run property update endpoint
Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to validate that a property field belongs to the specified run before updating its value which allows an authenticated user with run property-management access to crash the Playbooks plugin via a REST...
CVE-2026-9812
Mattermost versions 11.9.x ≤ 11.9.0, 11.8.x ≤ 11.8.4, 11.7.x ≤ 11.7.7, and 10.11.x ≤ 10.11.22 contain a missing validation flaw in the Playbooks plugin's run property update endpoint. The endpoint does not verify that a referenced property field belongs to the specified run before updating its va...
CLSA-2026-1789382508 TuxCare security update for com.jayway.jsonpath (1 CVE)
TuxCare rebuilt 2 com.jayway.jsonpath packages to address 1 CVE. Fixed in 2.4.0-tuxcare.1...
ROOT-APP-NPM-GHSA-MMX7-HFXF-JPPX GHSA-mmx7-hfxf-jppx in axios - Patched by Root
Root has patched GHSA-mmx7-hfxf-jppx in the axios package for Root:npm. Multiple fixed versions available...
EUVD-2026-77366
Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to validate channel action ownership which allows channel managers to update actions in other channels via the channel action update endpoint.. Mattermost Advisory ID: MMSA-2026-00692...
CVE-2026-10542 Playbooks channel action update validation issue
Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to validate channel action ownership which allows channel managers to update actions in other channels via the channel action update endpoint.. Mattermost Advisory ID: MMSA-2026-00692...
CLSA-2026-1789380988 TuxCare security update for org.springframework (20 CVEs)
TuxCare rebuilt 23 org.springframework packages to address 20 CVEs. Fixed in 5.2.11.RELEASE-tuxcare.1...
Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.67 fixes various security issues: The following security issues were fixed: CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction bsc1275458. CVE-2026-64530: net/sched: clsapi: Handle TCACTCONSUMED ...
CLSA-2026-1789379973 TuxCare security update for setuptools (1 CVE)
TuxCare rebuilt setuptools to address 1 CVE. Fixed in 60.0.0.post2+tuxcare...