OPENSUSE-SU-2026:11715-1 corosync-3.1.10-5.1 on GA media

These are all security issues fixed in the corosync-3.1.10-5.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-86542 knowns before 0.30.0 Path Traversal via Import Name

knowns before 0.30.0 fails to validate import names in the import routes, allowing unauthenticated attackers to write files outside the imports directory. Attackers can supply traversal sequences in the name parameter to escape the imports directory and overwrite arbitrary files writable by the...

CLSA-2026-1788814705 TuxCare security update for org.springframework (8 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 8 CVEs. Fixed in 5.3.25-tuxcare.9...

CLSA-2026-1788807441 TuxCare security update for jquery-mobile (1 CVE)

TuxCare rebuilt jquery-mobile to address 1 CVE. Fixed in 1.4.5-tuxcare.1...

CLSA-2026-1788807216 TuxCare security update for org.springframework (11 CVEs)

TuxCare rebuilt 22 org.springframework packages to address 11 CVEs. Fixed in 5.1.20.RELEASE-tuxcare.5...

CLSA-2026-1788806164 TuxCare security update for org.springframework.graphql (3 CVEs)

TuxCare rebuilt 2 org.springframework.graphql packages to address 3 CVEs. Fixed in 1.4.6-tuxcare.1...

CVE-2026-86287 Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths

Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths. Non-numeric and non-ASCII prefix lengths are accepted and treated as 0. Integers over 31 bits are silently truncated. A single malformed mask will poison the lookup table. The result is that the lookup will silently succe...

[SECURITY] [DSA 6488-1] jbig2dec security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6488-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 07, 2026 https://www.debian.org/security/faq -...

CLSA-2026-1788803633 TuxCare security update for org.springframework (3 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 3 CVEs. Fixed in 5.3.39-tuxcare.23...

ROOT-APP-PYPI-GHSA-QJ8W-RV5X-2V9H GHSA-qj8w-rv5x-2v9h in starlette - Patched by Root

Root has patched GHSA-qj8w-rv5x-2v9h in the starlette package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-GHSA-3QJ8-93XH-PWH2 GHSA-3qj8-93xh-pwh2 in starlette - Patched by Root

Root has patched GHSA-3qj8-93xh-pwh2 in the starlette package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2023-30798 CVE-2023-30798 in starlette - Patched by Root

Root has patched CVE-2023-30798 in the starlette package for Root:PyPI. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-15588 CVE-2026-15588 in glib2.0 - Patched by Root

Root has patched CVE-2026-15588 in the glib2.0 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-16118 CVE-2026-16118 in glib2.0 - Patched by Root

Root has patched CVE-2026-16118 in the glib2.0 package for Root:Debian:12. Multiple fixed versions available...

CLSA-2026-1788800102 TuxCare security update for org.springframework (8 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 8 CVEs. Fixed in 5.3.21-tuxcare.2...

CVE-2026-86469

A flaw was found in GLib2. When gfilereplace is used with GFILECREATEREPLACEDESTINATION and creating the .goutputstream-XXXXXX temporary file fails, the library unlinks the destination and recreates it without exclusive creation or symlink protection. A local attacker who can write to the...

UBUNTU-CVE-2026-86469

A flaw was found in GLib2. When gfilereplace is used with GFILECREATEREPLACEDESTINATION and creating the .goutputstream-XXXXXX temporary file fails, the library unlinks the destination and recreates it without exclusive creation or symlink protection. A local attacker who can write to the...

MAL-2026-16039 Malicious code in service-home (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffce66fb482d77c6fcfcf9cf3ab50c0de30f856921f4a90f9de969212a2687f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-16034 Malicious code in op-ts-server-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10907c74bd3094d2b21cc247498cb53b280d3e6bdb6947b86f17bee73b8eec7f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

SUSE-SU-2026:4055-1 Security update for bzip2

This update for bzip2 fixes the following issue: - CVE-2026-42250: off-by-one error in the bzip2recover utility when processing a specially crafted file can lead to a crash bsc1266786...