CLSA-2026-1776386120 TuxCare security update for io.netty (9 CVEs)

TuxCare rebuilt 46 io.netty packages to address 9 CVEs. Fixed in 4.1.75.Final-tuxcare.1...

CLSA-2026-1775781182 TuxCare security update for 134 packages (1 CVE)

TuxCare rebuilt 134 packages to address 1 CVE. Fixed in 7.16.7-tuxcare.1...

CLSA-2026-1775176186 TuxCare security update for socket.io (7 CVEs)

TuxCare rebuilt socket.io to address 7 CVEs. Fixed in 2.1.1-tuxcare.2...

CLSA-2026-1774916743 TuxCare security update for parse-git-config (10 CVEs)

TuxCare rebuilt parse-git-config to address 10 CVEs. Fixed in 3.0.0-tuxcare.1...

CLSA-2026-1774830255 TuxCare security update for tar (7 CVEs)

TuxCare rebuilt tar to address 7 CVEs. Fixed in 2.1.1-tuxcare.2...

CLSA-2026-1774743812 TuxCare security update for hawk (19 CVEs)

TuxCare rebuilt hawk to address 19 CVEs. Fixed in 1.0.0-tuxcare.1...

CLSA-2026-1774398078 TuxCare security update for dompurify (1 CVE)

TuxCare rebuilt dompurify to address 1 CVE. Fixed in 2.5.8-tuxcare.1...

CLSA-2026-1773706627 TuxCare security update for 40 packages (6 CVEs)

TuxCare rebuilt 40 packages to address 6 CVEs. Fixed in 10.1.42-tuxcare.1...

CLSA-2026-1773706638 TuxCare security update for angular (28 CVEs)

TuxCare rebuilt angular to address 28 CVEs. Fixed in 1.7.9-tuxcare.1...

CLSA-2026-1773188121 TuxCare security update for jquery (16 CVEs)

TuxCare rebuilt jquery to address 16 CVEs. Fixed in 1.8.2-tuxcare.1...

CLSA-2026-1773015264 TuxCare security update for semver (2 CVEs)

TuxCare rebuilt semver to address 2 CVEs. Fixed in 5.0.3-tuxcare.1...

CLSA-2025-1765411679 TuxCare security update for 35 packages (2 CVEs)

TuxCare rebuilt 35 packages to address 2 CVEs. Fixed in 8.5.100-tuxcare.4...

CLSA-2025-1761523598 TuxCare security update for org.springframework (1 CVE)

TuxCare rebuilt 24 org.springframework packages to address 1 CVE. Fixed in 5.3.39-tuxcare.9...

CLSA-2025-1761005194 TuxCare security update for 35 packages (1 CVE)

TuxCare rebuilt 35 packages to address 1 CVE. Fixed in 8.5.100-tuxcare.3...

ROOT-OS-DEBIAN-12-CVE-2026-54369 CVE-2026-54369 in acl - Patched by Root

Root has patched CVE-2026-54369 in the acl package for Root:Debian:12. Multiple fixed versions available...

AIOHTTP: HTTP request smuggling via WebSocket upgrade

SummaryThe HTTP parsers were vulnerable to a request smuggling attack relating to WebSocket upgrades. ImpactIf using the server-side component, it may be possible for an attacker to execute a request smuggling vulnerability using an edge case in the WebSocket upgrade procedure. AIOHTT is unaware ...

OPENSUSE-SU-2026:11444-1 azure-storage-azcopy-10.32.6-1.1 on GA media

These are all security issues fixed in the azure-storage-azcopy-10.32.6-1.1 package on the GA media of openSUSE Tumbleweed...

Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes

A Cross-Site Scripting XSS vulnerability has been identified in the Angular compiler's internationalization i18n pipeline. Although Angular disallows binding to event-handler attributes such as onclick and onerror through standard attribute validation validateAttribute / validateProperty, the i18...

ROOT-APP-PYPI-CVE-2026-28490 CVE-2026-28490 in Authlib - Patched by Root

Root has patched CVE-2026-28490 in the Authlib package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44288 CVE-2026-44288 in protobufjs - Patched by Root

Root has patched CVE-2026-44288 in the protobufjs package for Root:npm. Multiple fixed versions available...