137127 matches found
RHSA-2026:50773 Red Hat Security Advisory: ruby4.0 security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:50728 Red Hat Security Advisory: ruby:3.3 security, bug fix, and enhancement update
Bulletin has no description...
CLSA-2026-1787823957 TuxCare security update for webpack-dev-server (1 CVE)
TuxCare rebuilt webpack-dev-server to address 1 CVE. Fixed in 4.11.1-tuxcare.3...
CLSA-2026-1787823679 TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 2 CVEs. Fixed in 5.3.39-tuxcare.20...
CLSA-2026-1787819618 TuxCare security update for guzzlehttp/guzzle (3 CVEs)
TuxCare rebuilt guzzlehttp/guzzle to address 3 CVEs. Fixed in 6.5.8-p3+tuxcare...
curl: 06: Incomplete fix for CVE-2026-7009: GCC/SecTrust builds silently discard stapled OCSP responses
Summary Curlvtlsappleverify in lib/vtls/apple.c passes the stapled OCSP response to SecTrustSetOCSPResponse only when both HAVEBUILTINAVAILABLE and SUPPORTSSecOCSP are defined. When HAVEBUILTINAVAILABLE is absent, the OCSP buffer is silently discarded. GCC does not support builtinavailable, so th...
CLSA-2026-1787812038 TuxCare security update for setuptools (1 CVE)
TuxCare rebuilt setuptools to address 1 CVE. Fixed in 60.0.0.post1+tuxcare...
CLSA-2026-1787796805 TuxCare security update for axios (5 CVEs)
TuxCare rebuilt axios to address 5 CVEs. Fixed in 0.18.1-tuxcare.5...
SUSE CVE-2026-19685
NetworkManager did not apply the privateuser restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private WPA-Enterprise 802.1X connection profile's CA path at an...
SUSE CVE-2026-65637
Improper Input Validation vulnerability in Apache Tomcat due to incomplete fix for CVE-2026-32990. This issue affects Apache Tomcat: from 11.0.20 through 11.0.24, from 10.1.53 through 10.1.57, from 9.0.115 through 9.0.120. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121,...
OpenSovix
CVE-2025-46285 – Tiefgehende Sicherheitslückenanalyse und Proof-of-Concept Wichtiger Haftungsausschluss: Die folgenden Inhalte dienen ausschließlich der Sicherheitsbildung, defensiven Forschung und der Analyse von Sicherheitslücken. Testen oder nutzen Sie diese Sicherheitslücke nicht in nicht...
PT-2026-82835
Name of the Vulnerable Software and Affected Versions Wazuh versions 4.4.0 through 4.14.6 Description A flaw in the cluster file synchronization process allows an entity possessing the cluster key to write, overwrite, or delete arbitrary files within the /var/ossec directory on worker nodes,...
OPENSUSE-SU-2026:11625-1 python313-djangorestframework-3.18.0-2.1 on GA media
These are all security issues fixed in the python313-djangorestframework-3.18.0-2.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-86497
TuxCare rebuilt 9 @nestjs packages to address 2 CVEs. Fixed in 10.4.22-tuxcare.1...
Linux Distros Unpatched Vulnerability : CVE-2026-76844
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - webpack-dev-middleware resolves a request to a local file in getFilenameFromUrl by testing the request pathname against a traversal guard and then slicing it at...
golang security, bug fix, and enhancement update
1.26.7-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.7-1 - Update to Go 1.26.7 fips-1...
OPENSUSE-SU-2026:11622-1 libvirt-12.6.0-2.1 on GA media
These are all security issues fixed in the libvirt-12.6.0-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11617-1 coturn-4.17.2-1.1 on GA media
These are all security issues fixed in the coturn-4.17.2-1.1 package on the GA media of openSUSE Tumbleweed...
SUSE SLES15 Security Update : kernel (Live Patch 11 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:3770-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3770-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.37 fixes various security issues: The following security issues were fixed: -...