CLSA-2026-1785952964 TuxCare security update for org.springframework (14 CVEs)

TuxCare rebuilt 25 org.springframework packages to address 14 CVEs. Fixed in 6.2.15-tuxcare.3...

CLSA-2026-1776299669 TuxCare security update for io.netty (14 CVEs)

TuxCare rebuilt 43 io.netty packages to address 14 CVEs. Fixed in 4.1.60.Final-tuxcare.1...

CLSA-2026-1775003190 TuxCare security update for underscore (14 CVEs)

TuxCare rebuilt underscore to address 14 CVEs. Fixed in 1.4.4-tuxcare.1...

CLEANSTART-2026-CN74115 Security fixes in wildfly 40.0.1-r1

Package wildfly version 40.0.1-r1 fixes 14 vulnerabilities: ghsa-3qp7-7mw8-wx86, ghsa-x4gw-5cx5-pgmh, ghsa-c653-97m9-rcg9, CVE-2026-44249, CVE-2026-45416...

CLEANSTART-2026-RY09164 Security fixes in runc 1.4.2-r0

Package runc version 1.4.2-r0 fixes 14 vulnerabilities: CVE-2026-25681, CVE-2026-27136, CVE-2026-42502, CVE-2026-42506, CVE-2026-25680...

CLEANSTART-2026-KI83481 Security fixes in prometheus-mongodb-exporter-fips 0.47.2-r1

Package prometheus-mongodb-exporter-fips version 0.47.2-r1 fixes 14 vulnerabilities: ghsa-xmrv-pmrh-hhx2, CVE-2026-34986, CVE-2026-24051, CVE-2026-39883, CVE-2026-33186...

CLEANSTART-2026-JF86715 Security fixes in istio-fips 1.25.5-r5

Package istio-fips version 1.25.5-r5 fixes 14 vulnerabilities: ghsa-78h2-9frx-2jm8, ghsa-hfvc-g4fc-pqhx, CVE-2026-34986, CVE-2026-39883, CVE-2026-33810...

CLEANSTART-2026-TB77865 Security fixes in go-discover-fips 0_git20250325-r0

Package go-discover-fips version 0git20250325-r0 fixes 14 vulnerabilities: CVE-2025-22871, CVE-2025-4674, CVE-2025-58187, CVE-2025-58188, CVE-2025-61723...

CLEANSTART-2026-QT61211 Security fixes in envoy-ratelimit 0.0.0_git20251231-r0

Package envoy-ratelimit version 0.0.0git20251231-r0 fixes 14 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2026-24051, CVE-2025-61726...

CyberArk and HashiCorp Flaws Enable Remote Vault Takeover Without Credentials

Cybersecurity researchers have discovered over a dozen vulnerabilities in enterprise secure vaults from CyberArk and HashiCorp that, if successfully exploited, can allow remote attackers to crack open corporate identity systems and extract enterprise secrets and tokens from them. The 14...

CLSA-2025-1749548422 Fix of 14 CVEs

CVE-url: https://ubuntu.com/security/CVE-2025-21811 - nilfs2: protect access to buffers with no active references CVE-url: https://ubuntu.com/security/CVE-2025-21715 - net: davicom: fix UAF in dm9000drvremove CVE-url: https://ubuntu.com/security/CVE-2024-58083 - KVM: Explicitly verify target vCPU...

CLSA-2024-1732194412 Fix of 14 CVEs

Update to 8u432-ga fixing a number of CVEs - CVE-2024-21131: UTF8 size overflow - CVE-2024-21138: infinite loop vunlerability in SymbolTable - CVE-2024-21140: int overflow/underflow in Range Check Elimination - CVE-2024-21144: invalid header validation leads to Pack200 excessive loading time -...