CLSA-2026-1778788223 libssh2: Fix of 3 CVEs

CVE-2019-3860: bounds-check SFTP packet sizes in sftppacketrequire/v and sftpbin2attr - CVE-2019-3861: bounds-check paddinglength in libssh2transportread...

Security Bulletin: Vulnerability in tar affects IBM Netezza Appliance

Summary The tar package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2026-59873 Vulnerability Details CVEID:CVE-2026-59873 DESCRIPTION: node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.19, node-tar does not enforce hard uppe...

CLSA-2026-1784856192 TuxCare security update for serve-static (1 CVE)

TuxCare rebuilt serve-static to address 1 CVE. Fixed in 1.10.3-tuxcare.1...

CLSA-2026-1784596332 TuxCare security update for rollup (1 CVE)

TuxCare rebuilt rollup to address 1 CVE. Fixed in 0.59.4-tuxcare.1...

CLSA-2026-1782521951 TuxCare security update for axios (17 CVEs)

TuxCare rebuilt axios to address 17 CVEs. Fixed in 0.19.2-tuxcare.1...

CLSA-2026-1775262615 TuxCare security update for lodash (3 CVEs)

TuxCare rebuilt lodash to address 3 CVEs. Fixed in 4.17.15-tuxcare.5...

CLSA-2026-1774657373 TuxCare security update for jsonwebtoken (1 CVE)

TuxCare rebuilt jsonwebtoken to address 1 CVE. Fixed in 0.4.1-tuxcare.1...

CLSA-2026-1773879450 TuxCare security update for mysql2 (1 CVE)

TuxCare rebuilt mysql2 to address 1 CVE. Fixed in 2.3.3-tuxcare.3...

CLEANSTART-2026-TB76607 Security fixes in step 0.28.7-r0

Package step version 0.28.7-r0 fixes 1 vulnerabilities: CVE-2025-62820...

CLEANSTART-2026-YB99033 Security fixes in velero-fips 1.17.2-r4

Package velero-fips version 1.17.2-r4 fixes 1 vulnerabilities: CVE-2026-34986...

CLEANSTART-2026-GT46159 Security fixes in tomcat11 9.0.71-r0

Package tomcat11 version 9.0.71-r0 fixes 1 vulnerabilities: CVE-2023-24998...

CLEANSTART-2026-TX39547 Security fixes in curl 7.50.3-r0

Package curl version 7.50.3-r0 fixes 1 vulnerabilities: CVE-2016-7167...

CLEANSTART-2026-XB91017 Security fixes in curl 8.12.0-r0

Package curl version 8.12.0-r0 fixes 3 vulnerabilities: CVE-2025-0167, CVE-2025-0665, CVE-2025-0725...

OESA-2026-3126 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

UBUNTU-CVE-2026-64009

In the Linux kernel, the following vulnerability has been resolved: xfrm: Check for underflow in xfrmstatemtu Leo Lin reported OOB write issue in esp component: xfrmstatemtu returns u32 but performs its arithmetic in unsigned modulo-2^32 space using an attacker-influenced "headerlen + authsize +...

UBUNTU-CVE-2026-63797

In the Linux kernel, the following vulnerability has been resolved: rpmsg: char: Fix use-after-free on probe error path rpmsgchrdevprobe stores the newly allocated eptdev in the default endpoint's priv pointer before calling rpmsgchrdeveptdevadd. If rpmsgchrdeveptdevadd then fails, its error path...

UBUNTU-CVE-2026-59888

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.15.0 until 2.18.8, 2.21.4, and 3.1.4, Java Records using a PropertyNamingStrategy can bypass @JsonIgnore because POJOPropertiesCollector.removeUnwantedIgnorals records an...

CVE-2026-59874 node-tar: Negative tar entry size causes infinite loop in archive replace

node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, tar.replace accepts a checksum-valid tar header with a negative base-256 encoded entry size, causing the archive scanner to make no progress while repeatedly parsing the same header. This issue is fixed in version 7.5.18...

UBUNTU-CVE-2026-42389

This fix provides extra hardening for the 5.4.x branch by doing extra validation of incoming answers from authoritative servers...

UBUNTU-CVE-2026-52992

In the Linux kernel, the following vulnerability has been resolved: fs/adfs: validate nzones in adfsvalidatebblk Reject ADFS disc records with a zero zone count during boot block validation, before the disc record is used. When nzones is 0, adfsreadmap passes it to kmallocarray0, ... which return...