RHSA-2026:0922 Red Hat Security Advisory: golang security update

Bulletin has no description...

DEBIAN-CVE-2026-21637

A flaw in Node.js TLS error handling allows remote attackers to crash or exhaust resources of a TLS server when pskCallback or ALPNCallback are in use. Synchronous exceptions thrown during these callbacks bypass standard TLS error handling paths tlsClientError and error, causing either immediate...

DEBIAN-CVE-2025-59465

A malformed HTTP/2 HEADERS frame with oversized, invalid HPACK data can cause Node.js to crash by triggering an unhandled TLSSocket error ECONNRESET. Instead of safely closing the connection, the process crashes, enabling a remote denial of service. This primarily affects applications that do not...

DEBIAN-CVE-2025-59466

We have identified a bug in Node.js error handling where "Maximum call stack size exceeded" errors become uncatchable when asynchooks.createHook is enabled. Instead of reaching process.on'uncaughtException', the process terminates, making the crash unrecoverable. Applications that rely on...

ECHO-E238-0710-B4CC

Bulletin has no description...

DEBIAN-CVE-2026-0901

Inappropriate implementation in Blink in Google Chrome on Android prior to 144.0.7559.59 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: High...

MINI-M8GG-C4GH-P3WV

Bulletin has no description...

RHSA-2026:0743 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.16 security update

Bulletin has no description...

MINI-739W-F9M4-9PPC

Bulletin has no description...

BELL-CVE-2025-71109

Bulletin has no description...

BELL-CVE-2025-68771

Bulletin has no description...

BELL-CVE-2025-68797

Bulletin has no description...

BELL-CVE-2026-0915

Bulletin has no description...

DSA-6103-1 thunderbird - security update

Bulletin has no description...

ECHO-76A3-60B7-33E7

Bulletin has no description...

DEBIAN-CVE-2025-24531

In OpenSC pampkcs11 before 0.6.13, pamsmauthenticate wrongly returns PAMIGNORE in many error situations such as an error triggered by a smartcard before login, allowing authentication bypass...

BELL-CVE-2025-61731

Bulletin has no description...

CGA-4VFR-522G-H7RM

Bulletin has no description...

BELL-CVE-2025-68816

Bulletin has no description...

CVE-2026-21907

CVE-2026-21907 affects Juniper Networks Junos Space before version 24.1R5. The TLS/SSL server allows static key ciphers (ssl-static-key-ciphers) that do not support Perfect Forward Secrecy, reducing long-term and on-path confidentiality. Affected product/version is Junos Space prior to 24.1R5; no...