[SECURITY] [DLA 4879-1] strongswan security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4879-1 [email protected] https://www.debian.org/lts/security/ Simon Quigley November 02, 2026 https://wiki.debian.org/LTS -...

Exploit for Improper Encoding or Escaping of Output in Synology Beestation_Os

Synology DSM Vulnerability Detection Scanner This is a scanne...

Malware in atlassian-wallboard-plugin

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2026-114715

A flaw was found in Roundcube Webmail. This vulnerability allows an authenticated remote user to take over another account through unauthorized password modification. When a password change is requested, the Modoboa driver in the password plugin selects the first account returned by the API searc...

CLSA-2026-1793616631 TuxCare security update for @babel/plugin-proposal-object-rest-spread (2 CVEs)

TuxCare rebuilt @babel/plugin-proposal-object-rest-spread to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

CLSA-2026-1793616629 TuxCare security update for @babel/plugin-proposal-object-rest-spread (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-object-rest-spread to address 1 CVE. Fixed in 7.16.7-tuxcare.3...

CLSA-2026-1793616628 TuxCare security update for @babel/plugin-proposal-object-rest-spread (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-object-rest-spread to address 1 CVE. Fixed in 7.12.5-tuxcare.2...

CLSA-2026-1793616625 TuxCare security update for @babel/plugin-proposal-object-rest-spread (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-object-rest-spread to address 1 CVE. Fixed in 7.14.8-tuxcare.2...

CLSA-2026-1793616627 TuxCare security update for @babel/plugin-proposal-object-rest-spread (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-object-rest-spread to address 1 CVE. Fixed in 7.12.18-tuxcare.3...

CLSA-2026-1793616626 TuxCare security update for @babel/plugin-proposal-object-rest-spread (2 CVEs)

TuxCare rebuilt @babel/plugin-proposal-object-rest-spread to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...

CLSA-2026-1793616623 TuxCare security update for @babel/plugin-proposal-object-rest-spread (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-object-rest-spread to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

CLSA-2026-1793616624 TuxCare security update for @babel/plugin-proposal-object-rest-spread (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-object-rest-spread to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

CLSA-2026-1793616621 TuxCare security update for @babel/plugin-proposal-object-rest-spread (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-object-rest-spread to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

CLSA-2026-1793616619 TuxCare security update for @babel/plugin-proposal-object-rest-spread (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-object-rest-spread to address 1 CVE. Fixed in 7.12.18-tuxcare.2...

CLSA-2026-1793616620 TuxCare security update for @babel/plugin-proposal-object-rest-spread (1 CVE)

TuxCare rebuilt @babel/plugin-proposal-object-rest-spread to address 1 CVE. Fixed in 7.18.9-tuxcare.2...

WordPress s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions plugin <= 260927 - Unauthenticated Remote Code Execution vulnerability

Unauthenticated Remote Code Execution vulnerability discovered by khanhnv in WordPress Plugin s2Member versions = 260927...

CVE-2026-117518 @fastify/reply-from vulnerable to path traversal via backslash dot-segment prefix escape

@fastify/reply-from is a Fastify plugin that forwards requests to an upstream HTTP server. In versions up to and including 12.8.0, the plugin validated proxy paths against forward-slash dot-segments only and then built the target with the WHATWG URL parser, which normalizes a backslash and its...

Important: Red Hat Security Advisory: gimp security update

An update for gimp is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

gimp: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow

A flaw was found in GIMP's PSD file format plugin. This vulnerability, an unsigned integer underflow in the blockrem variable, occurs when a user opens a specially crafted .psd image file. The underflow leads to parser confusion, enabling an attacker to inject arbitrary data as layer resource...

WordPress PayHere Payment Gateway plugin 2.4.0-2.4.5 - Unauthenticated Payment Bypass vulnerability

Unauthenticated Payment Bypass vulnerability discovered by Naoki Kawahigashi in WordPress Plugin PayHere Payment Gateway Plugin for WooCommerce versions 2.4.0-2.4.5...