[SECURITY] [DLA 4703-1] openjdk-17 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4703-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort July 28, 2026 https://wiki.debian.org/LTS -...

RHSA-2026:47072 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Bulletin has no description...

SecureAI-Scan v0.6.0

SecureAI-Scan The AI security scanner that proves its findings. SecureAI-Scan finds LLM, MCP, Agent Skill, and RAG vulnerabilities in TypeScript, JavaScript, and Python — and shows you the evidence: the exact source → flow → sink path for every dataflow finding, resolved through real imports, not...

Security update for java-25-openjdk

This update for java-25-openjdk fixes the following issues: Update to upstream tag jdk-25.0.4+7 July 2026 CPU. Security issues fixed: CVE-2026-41254: lcms: information disclosure and denial of service via integer overflow in CubeSize bsc1264994. CVE-2026-46917: unauthenticated attacker with netwo...

vulnerabilities found in Apple MacOS

Apple has addressed several vulnerabilities in MacOS, specifically in the versions Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.x. These vulnerabilities involve various security issues in macOS, including insufficient sandbox restrictions, which may allow applications to gain unauthorized access t...

GHSA-RJR7-JGGH-PGCP vulnerabilities

Vulnerabilities for packages: cosmo-router-fips, karma-fips, cosmo-router, telegraf, fluxcd-kustomize-mutating-webhook-fips, karma, fluxcd-kustomize-mutating-webhook, zitadel...

GHSA-PGH9-MPWC-8JJF vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

GHSA-PM4M-PH32-GHV5 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, renovate, authentik-fips...

GHSA-C2RV-HWQM-WJPG vulnerabilities

Vulnerabilities for packages: opensearch...

GHSA-9M94-W2VQ-HCF9 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

GHSA-7P3P-8QV8-M2VH vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, confluent-kafka, druid, neo4j, apache-tika, akhq, dependency-track, solr...

GHSA-F4V5-65JJ-PCR2 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, confluent-kafka, druid, neo4j, akhq, dependency-track, solr...

GHSA-2FVJ-HGJ9-J2GR vulnerabilities

Vulnerabilities for packages: tez, confluent-kafka, druid, neo4j, apache-tika, akhq, dependency-track, solr...

GHSA-MFG7-5GFP-C4W3 vulnerabilities

Vulnerabilities for packages: zipkin, apicurio-registry, strimzi-kafka-operator, opensearch, apache-nifi, tez, thingsboard, keycloak, druid, celeborn, akhq, apache-pulsar, management-api-for-apache-cassandra-5.0, spark...

DEBIAN-CVE-2024-14041

In Bouncy Castle for Java from 1.73 to before 1.78, three ML-KEM CRYSTALS-Kyber routines divided secret-derived polynomial coefficients by the modulus q: Poly.toMsg, which decodes the decrypted message, and the ciphertext compression routines Poly.compressPoly and PolyVec.compressPolyVec. An...

USN-8620-1: Linux kernel vulnerabilities

Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...

USN-8619-1: Linux kernel (HWE) vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. CVE-2025-54505 It was discovered that some AMD Zen 2 processors did not properly isolate shared...

USN-8570-2: Linux kernel (Oracle) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP FOU; - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Drivers core; - Null block...

USN-8618-1 linux-aws, linux-raspi vulnerabilities

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. CVE-2025-54518 Several security issues...

USN-8617-1 linux-kvm vulnerabilities

It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. CVE-2026-43503 Several security issues...