ROOT-OS-UBUNTU-2404-CVE-2025-40279 CVE-2025-40279 in linux - Patched by Root

Root has patched CVE-2025-40279 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-31554 CVE-2026-31554 in linux - Patched by Root

Root has patched CVE-2026-31554 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2025-71098 CVE-2025-71098 in linux - Patched by Root

Root has patched CVE-2025-71098 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-3184 CVE-2026-3184 in util-linux - Patched by Root

Root has patched CVE-2026-3184 in the util-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-60002 CVE-2026-60002 in openssh - Patched by Root

Root has patched CVE-2026-60002 in the openssh package for Root:Debian:13. Multiple fixed versions available...

BIT-GOLANG-2026-56859 Add recursion depth guard during decode in encoding/xml

Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion...

ROOT-OS-DEBIAN-12-CVE-2026-49346 CVE-2026-49346 in libde265 - Patched by Root

Root has patched CVE-2026-49346 in the libde265 package for Root:Debian:12. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2024-22262 CVE-2024-22262 in org.springframework:spring-web - Patched by Root

Root has patched CVE-2024-22262 in the org.springframework:spring-web package for Root:Maven. Multiple fixed versions available...

OPENSUSE-SU-2026:11555-1 postgresql17-17.11-1.1 on GA media

These are all security issues fixed in the postgresql17-17.11-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11550-1 perl-Net-CIDR-Set-0.230.0-1.1 on GA media

These are all security issues fixed in the perl-Net-CIDR-Set-0.230.0-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-74951 Clickjacking issue in Firefox for Android

Clickjacking issue in Firefox for Android. This vulnerability was fixed in Firefox 154...

CVE-2026-74990

CVE-2026-74990 affects Thunderbird ESR 140.13, ESR 153.0, and Thunderbird 153, where internally found bugs showed evidence of memory corruption or security-relevant defects. Mozilla assesses that, with enough effort, some could have been exploitable, scoring it Critical (CVSS 9.8). The vulnerabil...

CVE-2026-74987 Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154

Internally found bugs present in Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firef...

python: Fix of 2 CVEs

CVE-2026-15308: fix quadratic complexity CPU DoS in the incremental HTMLParser when unterminated markup declarations span many feed calls, by accumulating new data and only rescanning once enough has piled up...

ROOT-APP-NPM-CVE-2026-26278 CVE-2026-26278 in fast-xml-parser - Patched by Root

Root has patched CVE-2026-26278 in the fast-xml-parser package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44574 CVE-2026-44574 in next - Patched by Root

Root has patched CVE-2026-44574 in the next package for Root:npm. Multiple fixed versions available...

UBUNTU-CVE-2026-72458

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix NULL pointer dereference in unpackpdb pdb-dfa could be NULL if unpackdfa fails, causing a NULL pointer dereference...

UBUNTU-CVE-2026-74433

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix UAF in rxgkissuechallenge Fix rxgkissuechallenge to free the page containing the challenge content after invoking the tracepoint as the whdr passed to the tracepoint points into the page just freed...

CVE-2026-74423

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix leak when pinning ubuf pages When pinuserpagesfast returns fewer pages than requested, the pages that were successfully pinned are not released, leading to a leak. Fix this by unpinning any partially pinned pag...

CVE-2026-72477

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: call ntfsbadinode when failing to rename It is safe to call ntfsbadinode on live inodes since: commit 519b078998ce "fs/ntfs3: Exclude call makebadinode for live nodes." The WARNON was added when it wasn't safe by: commi...