CLSA-2026-1779410900 TuxCare security update for org.springframework.boot (1 CVE)

TuxCare rebuilt 76 org.springframework.boot packages to address 1 CVE. Fixed in 2.7.16-tuxcare.3...

CLSA-2026-1779065187 TuxCare security update for org.springframework.boot (1 CVE)

TuxCare rebuilt 76 org.springframework.boot packages to address 1 CVE. Fixed in 2.7.18-tuxcare.14...

CLSA-2026-1778805965 TuxCare security update for org.springframework.boot (3 CVEs)

TuxCare rebuilt 76 org.springframework.boot packages to address 3 CVEs. Fixed in 2.7.16-tuxcare.1...

CLSA-2026-1778460303 TuxCare security update for org.springframework.boot (1 CVE)

TuxCare rebuilt 77 org.springframework.boot packages to address 1 CVE. Fixed in 2.3.6.RELEASE-tuxcare.3...

CLSA-2026-1776731791 TuxCare security update for bl (1 CVE)

TuxCare rebuilt bl to address 1 CVE. Fixed in 1.1.2-tuxcare.1...

CLSA-2026-1776299674 TuxCare security update for org.springframework.boot (2 CVEs)

TuxCare rebuilt 75 org.springframework.boot packages to address 2 CVEs. Fixed in 2.6.15-tuxcare.9...

CLSA-2026-1776040413 TuxCare security update for org.springframework.boot (1 CVE)

TuxCare rebuilt 77 org.springframework.boot packages to address 1 CVE. Fixed in 2.3.6.RELEASE-tuxcare.2...

CLSA-2026-1774916753 TuxCare security update for org.springframework.boot (2 CVEs)

TuxCare rebuilt 77 org.springframework.boot packages to address 2 CVEs. Fixed in 2.3.6.RELEASE-tuxcare.1...

CLSA-2026-1772756021 TuxCare security update for bl (2 CVEs)

TuxCare rebuilt bl to address 2 CVEs. Fixed in 1.0.0-tuxcare.1...

CLSA-2026-1770336547 TuxCare security update for org.springframework.boot (2 CVEs)

TuxCare rebuilt 78 org.springframework.boot packages to address 2 CVEs. Fixed in 3.1.8-tuxcare.1...

CLSA-2025-1764029254 TuxCare security update for org.springframework.boot (1 CVE)

TuxCare rebuilt 76 org.springframework.boot packages to address 1 CVE. Fixed in 2.7.18-tuxcare.10...

CLSA-2025-1754006610 TuxCare security update for org.springframework.boot (1 CVE)

TuxCare rebuilt 75 org.springframework.boot packages to address 1 CVE. Fixed in 2.6.15.tuxcare.1...

CLSA-2025-1755561852 TuxCare security update for org.springframework.boot (1 CVE)

TuxCare rebuilt 76 org.springframework.boot packages to address 1 CVE. Fixed in 2.7.18-tuxcare.8...

CLSA-2025-1752019358 TuxCare security update for org.springframework.boot (5 CVEs)

TuxCare rebuilt 77 org.springframework.boot packages to address 5 CVEs. Fixed in 2.4.6.tuxcare.2...

CLSA-2025-1738627240 TuxCare security update for org.springframework.boot (1 CVE)

TuxCare rebuilt 76 org.springframework.boot packages to address 1 CVE. Fixed in 2.7.18.tuxcare.4...

CVE-2026-11835

Time-of-check time-of-use TOCTOU vulnerability combined with missing input validation in Caliptra Core ROM UpdateResetFlow::run in subsystem mode allows a compromised local attacker to silently bypass secure boot by supplying an AXI staging address that is not validated against the strap-configur...

CVE-2026-11835

Time-of-check time-of-use TOCTOU vulnerability combined with missing input validation in Caliptra Core ROM UpdateResetFlow::run in subsystem mode allows a compromised local attacker to silently bypass secure boot by supplying an AXI staging address that is not validated against the strap-configur...

CVE-2026-11835

Caliptra Core ROM (2.1.0–2.1.1) contains a TOCTOU vulnerability in UpdateResetFlow::run() that, with missing input validation, lets a compromised MCU firmware with AXI manager access inject an unvalidated AXI staging address. This bypasses secure boot by not validating against SS_EXTERNAL_STAGING...

EUVD-2026-52549

Time-of-check time-of-use TOCTOU vulnerability combined with missing input validation in Caliptra Core ROM UpdateResetFlow::run in subsystem mode allows a compromised local attacker to silently bypass secure boot by supplying an AXI staging address that is not validated against the strap-configur...

CVE-2026-11835 Caliptra Update-Reset Secure-Boot Bypass via Attacker-Chosen AXI Staging Address (TOCTOU)

Time-of-check time-of-use TOCTOU vulnerability combined with missing input validation in Caliptra Core ROM UpdateResetFlow::run in subsystem mode allows a compromised local attacker to silently bypass secure boot by supplying an AXI staging address that is not validated against the strap-configur...