CLSA-2026-1773879458 TuxCare security update for 86 packages (2 CVEs)

TuxCare rebuilt 86 packages to address 2 CVEs. Fixed in 9.4.60.tuxcare0001...

CLSA-2025-1764547660 TuxCare security update for 87 packages (1 CVE)

TuxCare rebuilt 87 packages to address 1 CVE. Fixed in 9.4.53.v20231009-tuxcare.2...

MINI-84RF-R45G-73G3

Bulletin has no description...

2026 Cybersecurity Excellence Awards: Community Choice Winners Selected Through 80,000 Votes

Las Vegas, Nevada, 4th August 2026, CyberNewswire...

Exposure of Sensitive Information Through Metadata

Overview Affected versions of this package are vulnerable to Exposure of Sensitive Information Through Metadata via CFB quick-check decryption oracle in the getDataStream method of PGPSymmetricKeyEncryptedData, reached through PGPPBEEncryptedData, PGPSessionKeyEncryptedData, and...

UBUNTU-CVE-2026-58059

In Bouncy Castle for Java before 1.85, Quadratic-time escaping when stringifying X.500 distinguished names. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series...

CVE-2026-13506

CVE-2026-13506 affects multiple Bouncy Castle for Java lines: Java mainline prior to 1.85; Java LTS prior to 2.73.12; and Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.x), 2.0.2 (2.0.x), and 2.1.3 (2.1.x). Root cause is a Lazy ASN.1 sequence that resets the nesting-depth guard, with potential im...

CVE-2026-58062

CVE-2026-58062 affects Bouncy Castle for Java prior to 1.85, including LTS prior to 2.73.12, and BC-FJA prior to bc-fips 2.0.2 (2.0.x) and 2.1.3 (2.1.x). The issue: Stapled OCSP responses are accepted without binding to the checked certificate, enabling potential information disclosure or integri...

CVE-2026-59649 OpenPGP user-attribute subpacket length bounded only by JVM max memory

In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 1.0.13 1.0.X series, 2.0.13 2.0.X series and 2.1.13 2.1.X serie...

CVE-2026-59652

CVE-2026-59652 affects Bouncy Castle for Java prior to 1.85, where LDAP filter injection can occur via the legacy jdk1.4 LDAPStoreHelper. The vulnerability is linked to the LDAP filter handling in that component. The provided sources do not detail exploits or exploitation status; no working explo...

CVE-2026-15055

CVE-2026-15055 affects Bouncy Castle for Java (before 1.85), LTS (before 2.73.12), and BC-FJA (before bcpkix-fips 1.0.12 / 2.0.12 / 2.1.12). The PKCS#8 / PBES2 decryptors honour an unbounded KDF cost parameter from the input, enabling a denial-of-service attack by supplying a key with an excessiv...

PT-2026-67020

Name of the Vulnerable Software and Affected Versions Bouncy Castle for Java versions prior to 1.85 Bouncy Castle for Java LTS versions prior to 2.73.12 Description RSA PKCS1 verification skips the last two hash bytes when using the NULL-omitted path. Recommendations Update Bouncy Castle for Java...

[SECURITY] Fedora 43 Update: nasm-2.16.03-5.fc43

NASM is the Netwide Assembler, a free portable assembler for the Intel 80x86 microprocessor series, using primarily the traditional Intel instruction mnemonics and syntax...

CLEANSTART-2026-TR82670 Security fixes in prometheus-redis-exporter 1.87.0-r0

Package prometheus-redis-exporter version 1.87.0-r0 fixes 1 vulnerabilities: ghsa-259r-337f-4rfw...

CLEANSTART-2026-OA40644 Security fixes in az 2.83.0-r1

Package az version 2.83.0-r1 fixes 4 vulnerabilities: CVE-2026-44432, CVE-2026-44431, CVE-2026-39892, CVE-2026-45409...

CLEANSTART-2026-CW50457 Security fixes in airflow-3 3.2.0-r0

Package airflow-3 version 3.2.0-r0 fixes 85 vulnerabilities: CVE-2026-44405, CVE-2026-42561, CVE-2026-8838, CVE-2026-41018, CVE-2026-41016...

CLEANSTART-2026-BB97886 Security fixes in cosign 2.5.3-r0

Package cosign version 2.5.3-r0 fixes 82 vulnerabilities: CVE-2025-0913, CVE-2025-15558, CVE-2025-22868, CVE-2025-22869, CVE-2025-22870...

EUVD-2026-50964

A path traversal vulnerability was found in the IHM Log handling of ADM. The vulnerability occurs because user-controlled disk serial input is not sufficiently validated before being used to construct the path of an IHM log database file. An authenticated attacker can exploit this issue to cause...

CVE-2026-67244

A format string vulnerability was found in the Notification OAuth settings of ADM. The vulnerability occurs because user-controlled notification configuration input may be processed through an unsafe format string operation. An authenticated administrator can exploit this issue to disclose memory...

CVE-2026-12703

CVE-2026-12703 affects TeamViewer Full Client and Host for macOS before 15.80. A business logic error allows an authenticated attacker to bypass the configured 2FA for the Connections approval flow via Unattended Access and establish a remote connection to the macOS host. Impact: remote access wi...