UBUNTU-CVE-2026-78129

strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS5 decryption...

UBUNTU-CVE-2026-78127

libcharon in strongSwan 4.1.2 through 6.0.7 has a missing release of memory after its effective lifetime in the IKE message parser...

UBUNTU-CVE-2026-78134

strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity...

UBUNTU-CVE-2026-78133

libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling...

UBUNTU-CVE-2026-78130

strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser...

UBUNTU-CVE-2026-78135

libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATECHILDSA requests are mishandled, there can be an authentication bypass...

UBUNTU-CVE-2026-78124

strongSwan 5.0.2 through 6.0.7 allows PKCS7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime...

UBUNTU-CVE-2026-78132

strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax...

UBUNTU-CVE-2026-78126

strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin...

UBUNTU-CVE-2026-78131

strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser...

UBUNTU-CVE-2026-78123

strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS7 parsing in the openssl plugin...

UBUNTU-CVE-2026-19204

A client may send a WebSocket frame with an unknown opcode and a very large declared payload length, causing Jetty to attempt a large memory allocation and potentially exhaust the JVM heap. This occurs when auto-fragmentation is enabled, as unknown opcodes bypass the normal maximum frame size...

ROOT-OS-DEBIAN-13-CVE-2026-0864 CVE-2026-0864 in python3.13 - Patched by Root

Root has patched CVE-2026-0864 in the python3.13 package for Root:Debian:13. Multiple fixed versions available...

ROOT-APP-COMPOSER-AIKIDO-2026-123768 AIKIDO-2026-123768 in magento/product-enterprise-edition - Patched by Root

Root has patched AIKIDO-2026-123768 in the magento/product-enterprise-edition package for Root:Composer. Multiple fixed versions available...

ROOT-APP-COMPOSER-AIKIDO-2026-248927 AIKIDO-2026-248927 in magento/product-community-edition - Patched by Root

Root has patched AIKIDO-2026-248927 in the magento/product-community-edition package for Root:Composer. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-18649 CVE-2026-18649 in gst-plugins-good1.0 - Patched by Root

Root has patched CVE-2026-18649 in the gst-plugins-good1.0 package for Root:Debian:13. Multiple fixed versions available...

CLSA-2026-1788776909 TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)

TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 3.4.1-tuxcare.1...

CLSA-2026-1788776288 TuxCare security update for com.rabbitmq:amqp-client (2 CVEs)

TuxCare rebuilt com.rabbitmq:amqp-client to address 2 CVEs. Fixed in 5.19.0-tuxcare.1...

CLSA-2026-1788775607 TuxCare security update for immutable (1 CVE)

TuxCare rebuilt immutable to address 1 CVE. Fixed in 3.8.3-tuxcare.2...

ROOT-OS-ALPINE-323-CVE-2026-58051 CVE-2026-58051 in libssh2 - Patched by Root

Root has patched CVE-2026-58051 in the libssh2 package for Root:Alpine:3.23. Multiple fixed versions available...