com.baomidou:shaun-core (>=1.0, <=1.4), com.baomidou:shaun-spring-boot-starter (>=1.0, <=1.4) +37 more potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (>=4.0.0-rc1, <=4.5.8)

org.pac4j:pac4j-jwt MAVEN version =4.0.0-rc1, =1.0, =1.0, =1.1, =1.1.0, =1.1.1, =1.1.1, =1.1.1, =1.0.0.release, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.9.0 and more Source cves: CVE-2026-29000 Source advisory: GHSA-PM7G-W2CF-Q238...

org.linuxprobe:shiro-pac4j-base (>=0.0.1.rs1, <=0.0.1.rs4), org.linuxprobe:shiro-pac4j-spring-boot-start (>=0.0.1.rs1, <=0.0.1.rs7) potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (3.8.3)

org.pac4j:pac4j-jwt MAVEN version 3.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-jwt and may be impacted: - org.linuxprobe:shiro-pac4j-base =0.0.1.rs1, =0.0.1.rs1, =0.0.1.rs7 Source cves: CVE-2026-29000 Source advisory:...

osbuild-composer security update

149-5.0.1 - Add missing dependency over dracut-config-rescue for image-installer Orabug: 38587453 - Add OL10 support - Update repository URLs for baseos, appstream and UERK - Fix the label for UEKR repository - Simplify repository names JIRA: OLDIS-35893 - Ensure build on latest golang:...

ba.sake:pac4j-testkit (>=0.1.0, <=0.2.0), com.baomidou:shaun-core (2.0.0) +5 more potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (>=6.0.3, <=6.2.2)

org.pac4j:pac4j-jwt MAVEN version =6.0.3, =0.1.0, =7.1.0-rc6, =7.1.0-rc6, =7.3.4 Source cves: CVE-2026-29000 Source advisory: MEND:CVE-2026-29000...

CVE-2026-20079

A vulnerability in the web interface of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system. This vulnerability is due ...

K000160223: Spring cloud gateway vulnerability CVE-2025-41243

Security Advisory Description Spring Cloud Gateway Server Webflux may be vulnerable to Spring Environment property modification. An application should be considered vulnerable when all the following are true: The application is using Spring Cloud Gateway Server Webflux Spring Cloud Gateway Server...

CVE-2025-47378

Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain...

[SECURITY] Fedora 42 Update: keylime-7.14.1-1.fc42

Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution...

[SECURITY] Fedora 43 Update: keylime-7.14.1-1.fc43

Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution...

GRUB2 Vulnerable to Out-of-Bounds Write via Network Boot Process in 'grub_strcpy()' Function

A flaw was found in grub2. During the network boot process, when trying to search for the configuration file, grub copies data from a user controlled environment variable into an internal buffer using the grubstrcpy function. During this step, it fails to consider the environment variable length...

CVE-2025-62816

An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, and 2500. Unvalidated VS4LVERTEXIOCBOOTUP input leads to a denial of service...

CVE-2025-47378

Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain...

EUVD-2025-208187

Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain...

CVE-2025-47378 Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS

Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain...

CVE-2025-47378 Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS

Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain...

CVE-2025-47378

Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain...

SUSE-SU-2026:0741-1 Security update for shim

This update for shim fixes the following issues: shim is updated to version 16.1: - shimstartimage: fix guid/handle pairing when uninstalling protocols - Fix uncompressed ipv6 netboot - fix test segfaults caused by uninitialized memory - SbatLevelVariable.txt: minor typo fix. - Realloc needs to...

CVE-2025-47378: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain...

kernel security update

4.18.0-553.109.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

PT-2026-22643

Name of the Vulnerable Software and Affected Versions versions prior to 2025-47378 Description A cryptographic issue exists when a shared VM reference allows HLOS to access the boot loader and certificate chain. This could potentially compromise the system's security. Recommendations At the momen...