17628 matches found
CLSA-2026-1771891820 TuxCare security update for 38 packages (1 CVE)
TuxCare rebuilt 38 packages to address 1 CVE. Fixed in 9.0.50-tuxcare.5...
CLSA-2026-1771978232 TuxCare security update for 38 packages (1 CVE)
TuxCare rebuilt 38 packages to address 1 CVE. Fixed in 9.0.90-tuxcare.3...
CLSA-2026-1770077338 TuxCare security update for 38 packages (4 CVEs)
TuxCare rebuilt 38 packages to address 4 CVEs. Fixed in 9.0.90-tuxcare.2...
CLSA-2025-1763597220 TuxCare security update for 38 packages (2 CVEs)
TuxCare rebuilt 38 packages to address 2 CVEs. Fixed in 9.0.50-tuxcare.1...
CLSA-2025-1765930090 TuxCare security update for 38 packages (9 CVEs)
TuxCare rebuilt 38 packages to address 9 CVEs. Fixed in 9.0.75-tuxcare.2...
CLSA-2025-1764720465 TuxCare security update for 38 packages (18 CVEs)
TuxCare rebuilt 38 packages to address 18 CVEs. Fixed in 9.0.50-tuxcare.2...
CLSA-2025-1763338014 TuxCare security update for 38 packages (10 CVEs)
TuxCare rebuilt 38 packages to address 10 CVEs. Fixed in 9.0.90-tuxcare.1...
CLSA-2025-1765411683 TuxCare security update for 38 packages (15 CVEs)
TuxCare rebuilt 38 packages to address 15 CVEs. Fixed in 9.0.87-tuxcare.1...
CLSA-2025-1761696401 TuxCare security update for org.springframework (8 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 8 CVEs. Fixed in 5.3.31-tuxcare.1...
CLSA-2025-1755043490 TuxCare security update for org.yaml:snakeyaml (8 CVEs)
TuxCare rebuilt org.yaml:snakeyaml to address 8 CVEs. Fixed in 1.23.tuxcare.1...
CLSA-2025-1751500955 TuxCare security update for 35 packages (10 CVEs)
TuxCare rebuilt 35 packages to address 10 CVEs. Fixed in 8.5.100.tuxcare.1...
Important: Red Hat Security Advisory: python3 security update
An update for python3 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili...
kernel-rt security update
An update is available for kernel-rt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel-rt packages provide the Real Time Linux Kernel, which enables...
frr security update
An update is available for frr. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list FRRouting is free software that manages TCP/IP based routing protocols. It suppor...
PYSEC-2026-3552 cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing
Summary pkcs7decryptder, pkcs7decryptpem, and pkcs7decryptsmime reported the outcome of decrypting a RecipientInfo's encryptedKey in several distinguishable ways, one of which disclosed the exact length recovered from the RSA operation. The same distinction was also observable by timing. An...
UBUNTU-CVE-2026-10050
In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. This was done because the initial specification for HTTP did not specify explicitly a charset, and it was assumed to be ISO-8859-1 for historical reasons. If the password contains...
EUVD-2026-52656
In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. This was done because the initial specification for HTTP did not specify explicitly a charset, and it was assumed to be ISO-8859-1 for historical reasons. If the password contains...
CVE-2026-10050 Digest authentication lossy encoding
In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. This was done because the initial specification for HTTP did not specify explicitly a charset, and it was assumed to be ISO-8859-1 for historical reasons. If the password contains...
CVE-2026-10050
Summary: CVE-2026-10050 affects Eclipse Jetty’s Digest authentication, where the server-side password encoding uses ISO-8859-1 by default. When characters cannot be represented in ISO-8859-1, they are replaced with “?”, enabling an attacker to submit a Digest header where a password of all “?” ch...