CLSA-2026-1790074384 TuxCare security update for org.springframework (34 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 34 CVEs. Fixed in 5.3.13-tuxcare.1...

CLSA-2026-1790069660 TuxCare security update for org.springframework (33 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 33 CVEs. Fixed in 5.3.19-tuxcare.1...

Important: Red Hat Security Advisory: Red Hat AI Base Images 3.4.2 (Gaudi)

Red Hat AI Base Images 3.4.2 Gaudi is now available. Red Hat® AI Base Images...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.34 bug fix and security update

Red Hat OpenShift Container Platform release 4.21.34 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...

OPENSUSE-SU-2026:21897-1 Security update for govulncheck-vulndb

This update for govulncheck-vulndb fixes the following issues: Changes for govulncheck-vulndb: - Update to version 0.0.20260916T180043 2026-09-16T18:00:43Z jscPED-11136. Go CVE Numbering Authority IDs added or updated with aliases: GO-2026-6348 CVE-2026-84304 GHSA-vp52-pcj8-j9qc GO-2026-6356...

SUSE-SU-2026:21434-1 Security update for helm

This update for helm fixes the following issues: Update to version 3.20.2. Security issued fixed: - CVE-2025-55199: specially crafted JSON Schema can lead to out of memory OOM termination bsc1248093. - CVE-2026-35206: specially crafted Chart will have contents extracted to immediate output...

SUSE-SU-2026:21461-1 Security update for helm

This update for helm fixes the following issues: Update to version 3.20.2. Security issued fixed: - CVE-2025-55199: specially crafted JSON Schema can lead to out of memory OOM termination bsc1248093. - CVE-2026-35206: specially crafted Chart will have contents extracted to immediate output...

[SECURITY] [DLA 4790-1] chromium security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4790-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort September 21, 2026 https://wiki.debian.org/LTS -...

webkit2gtk3 security update

2.52.5-1 - Update to 2.52.5 2.52.4-1 - Update to 2.52.4 2.52.3-1 - Update to 2.52.3 2.50.4-1 - Update to 2.50.4 2.50.3-1 - Update to 2.50.3 2.50.1-1 - Update to 2.50.1 2.50.0-1 - Update to 2.50.0 2.48.5-1 - Update to 2.48.5 2.48.3-1 - Update to 2.48.3 2.48.2-1 - Update to 2.48.2 - Reenable JIT...

Debian dla-4790 : chromium - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4790 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4790-1 [email protected]...

Debian dla-4788 : ata-modules-6.12.100+deb12-armmp-di - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4788 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4788-1 [email protected]...

[SECURITY] [DLA 4788-1] linux-6.12 security update

Debian LTS Advisory DLA-4788-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings September 19, 2026 https://wiki.debian.org/LTS Package : linux-6.12 Version : 6.12.107-1deb12u1 CVE ID : CVE-2025-38525 CVE-2025-40054 CVE-2025-40074 CVE-2026-43197 CVE-2026-53092...

DEBIAN-CVE-2026-61552

Icinga 2 is an open source monitoring system. From 2.4 until 2.14.9, 2.15.4, and 2.16.2, the /v1/objects API writes attacker-controlled template names into generated configuration without escaping them. An authenticated ApiUser with an objects/create/ permission can inject Icinga 2 DSL...

CVE-2026-61552

Icinga 2 is an open source monitoring system. From 2.4 until 2.14.9, 2.15.4, and 2.16.2, the /v1/objects API writes attacker-controlled template names into generated configuration without escaping them. An authenticated ApiUser with an objects/create/ permission can inject Icinga 2 DSL...

UBUNTU-CVE-2026-61550

Icinga 2 is an open source monitoring system. From 2.8 until 2.14.9, 2.15.4, and 2.16.2, certificate update JSON-RPC message handling does not validate that the sender is a trusted endpoint. An unauthenticated network attacker able to connect to TCP port 5665 can replace the node certificate and...

CVE-2026-61550

Icinga 2 is an open source monitoring system. From 2.8 until 2.14.9, 2.15.4, and 2.16.2, certificate update JSON-RPC message handling does not validate that the sender is a trusted endpoint. An unauthenticated network attacker able to connect to TCP port 5665 can replace the node certificate and...

UBUNTU-CVE-2026-61552

Icinga 2 is an open source monitoring system. From 2.4 until 2.14.9, 2.15.4, and 2.16.2, the /v1/objects API writes attacker-controlled template names into generated configuration without escaping them. An authenticated ApiUser with an objects/create/ permission can inject Icinga 2 DSL...

CVE-2026-61551

Icinga 2 is an open source monitoring system. Prior to 2.14.9, 2.15.4, and 2.16.2, parsing deeply nested JSON can exhaust the call stack because nesting depth is not bounded. The affected JSON parsing paths are reachable by unauthenticated network clients through the Icinga 2 service on TCP port...

UBUNTU-CVE-2026-61551

Icinga 2 is an open source monitoring system. Prior to 2.14.9, 2.15.4, and 2.16.2, parsing deeply nested JSON can exhaust the call stack because nesting depth is not bounded. The affected JSON parsing paths are reachable by unauthenticated network clients through the Icinga 2 service on TCP port...

[SECURITY] [DSA 6506-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6506-1 [email protected] https://www.debian.org/security/ Andres Salomon September 17, 2026 https://www.debian.org/security/faq -...