CLSA-2026-1788970606 TuxCare security update for 8 packages (1 CVE)

TuxCare rebuilt 8 packages to address 1 CVE. Fixed in 3.6.5-tuxcare.6...

CLSA-2026-1788969961 TuxCare security update for drupal/access_code (1 CVE)

TuxCare rebuilt drupal/accesscode to address 1 CVE. Fixed in 7.1.1-p1+tuxcare...

Chromium: Monthly Vulnerability Update (September 2026)

Palo Alto Networks incorporated the following Chromium security fixes into our products: https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop28.html Work around: No known workarounds exist for this issue...

CLSA-2026-1788969384 TuxCare security update for drupal/colorbox (1 CVE)

TuxCare rebuilt drupal/colorbox to address 1 CVE. Fixed in 2.1.2-p1+tuxcare...

CLSA-2026-1788968613 TuxCare security update for drupal/openid_connect (3 CVEs)

TuxCare rebuilt drupal/openidconnect to address 3 CVEs. Fixed in 7.1.3-p1+tuxcare...

EUVD-2026-75056

After spoofing the device and obtaining one user confirmation, an attacker may be able to cause the application to transmit firmware through an unauthenticated and unsigned update channel...

CVE-2026-77974 Softish C6 Ear Camera and EarVision Android Application Missing authentication for critical function

After spoofing the device and obtaining one user confirmation, an attacker may be able to cause the application to transmit firmware through an unauthenticated and unsigned update channel...

CVE-2026-77974 Softish C6 Ear Camera and EarVision Android Application Missing authentication for critical function

After spoofing the device and obtaining one user confirmation, an attacker may be able to cause the application to transmit firmware through an unauthenticated and unsigned update channel...

CVE-2026-77974

Softish C6 Ear Camera and its EarVision Android Application contain a vulnerability where a critical function lacks proper authentication. After spoofing the device and obtaining a single user confirmation, an attacker in the adjacent network can cause the application to transmit firmware through...

CLSA-2026-1788968317 TuxCare security update for drupal/bootstrap_site_alert (1 CVE)

TuxCare rebuilt drupal/bootstrapsitealert to address 1 CVE. Fixed in 7.1.6-p1+tuxcare...

CVE-2026-82563 Softish C6 Ear Camera and EarVision Android Application Authentication bypass by spoofing

An attacker could impersonate the camera and place themselves in a man-in-the-middle or device-emulation position. This permits manipulation of device status responses, observation of application requests, and potential triggering of firmware-update behavior...

EUVD-2026-75053

An attacker could impersonate the camera and place themselves in a man-in-the-middle or device-emulation position. This permits manipulation of device status responses, observation of application requests, and potential triggering of firmware-update behavior...

CVE-2026-82563

CVE-2026-82563 affects the Softish C6 Ear Camera and the EarVision Android Application . The vulnerability is an authentication bypass by spoofing : an attacker can impersonate the camera device, placing themselves in a man-in-the-middle or device-emulation position. This enables manipulation of ...

CLSA-2026-1788967519 TuxCare security update for vite (2 CVEs)

TuxCare rebuilt vite to address 2 CVEs. Fixed in 8.0.10-tuxcare.1...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

CLSA-2026-1788966294 TuxCare security update for vite (2 CVEs)

TuxCare rebuilt vite to address 2 CVEs. Fixed in 8.0.12-tuxcare.1...

Important: Red Hat Security Advisory: Red Hat Update Infrastructure 5.3 security update

The latest release of Red Hat Update Infrastructure. For more details, see the product documentation. Red Hat Update Infrastructure RHUI container images are based on the latest RHUI RPM packages and the ubi9 or ubi9-init base images. This release updates to the latest version...

CVE-2026-86765

Snipe-IT versions before 8.7.0 fail to enforce checkout authorization when assignment fields are submitted to the asset update endpoint. Authenticated users with edit permission but explicitly denied checkout permission can reassign assets, bypass check-in procedures, and alter custody records by...

CLSA-2026-1788935722 TuxCare security update for aiohttp (2 CVEs)

TuxCare rebuilt aiohttp to address 2 CVEs. Fixed in 3.8.5.post13+tuxcare...

OPENSUSE-SU-2026:21816-1 Security update for hauler

This update for hauler fixes the following issues: Changes in hauler: Update to 2.1.0 bsc1265425, CVE-2026-41888, bsc1278584, CVE-2026-56855,CVE-2026-56854,CVE-2026-78662,...