CLSA-2026-1777163883 TuxCare security update for trim-newlines (10 CVEs)

TuxCare rebuilt trim-newlines to address 10 CVEs. Fixed in 3.0.0-tuxcare.1...

CLSA-2026-1775953999 TuxCare security update for svelte (4 CVEs)

TuxCare rebuilt svelte to address 4 CVEs. Fixed in 4.2.20-tuxcare.1...

CLSA-2026-1775521864 TuxCare security update for 18 packages (1 CVE)

TuxCare rebuilt 18 packages to address 1 CVE. Fixed in 1.19.3-tuxcare.1...

CLSA-2026-1775003195 TuxCare security update for 4 packages (2 CVEs)

TuxCare rebuilt 4 packages to address 2 CVEs. Fixed in 9.0.83-tuxcare.3...

CLSA-2026-1774916751 TuxCare security update for org.springframework (5 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 5 CVEs. Fixed in 5.3.7-tuxcare.1...

CLSA-2026-1774570933 TuxCare security update for http-signature (1 CVE)

TuxCare rebuilt http-signature to address 1 CVE. Fixed in 0.9.11-tuxcare.1...

CLSA-2026-1774052351 TuxCare security update for angular (1 CVE)

TuxCare rebuilt angular to address 1 CVE. Fixed in 1.6.10-tuxcare.4...

CLSA-2026-1773360972 TuxCare security update for ms (2 CVEs)

TuxCare rebuilt ms to address 2 CVEs. Fixed in 0.7.1-tuxcare.1...

CLSA-2026-1773101690 TuxCare security update for org.bouncycastle (2 CVEs)

TuxCare rebuilt 12 org.bouncycastle packages to address 2 CVEs. Fixed in 1.64-tuxcare.1...

CLSA-2026-1767571924 TuxCare security update for h11 (1 CVE)

TuxCare rebuilt h11 to address 1 CVE. Fixed in 0.9.0.post1+tuxcare...

CLSA-2026-1772496674 TuxCare security update for semver (2 CVEs)

TuxCare rebuilt semver to address 2 CVEs. Fixed in 6.3.0-tuxcare.1...

CLSA-2026-1771978232 TuxCare security update for 38 packages (1 CVE)

TuxCare rebuilt 38 packages to address 1 CVE. Fixed in 9.0.90-tuxcare.3...

CLSA-2026-1771200578 TuxCare security update for marked (2 CVEs)

TuxCare rebuilt marked to address 2 CVEs. Fixed in 4.0.9-tuxcare.1...

CLSA-2025-1752537764 TuxCare security update for org.springframework (1 CVE)

TuxCare rebuilt 24 org.springframework packages to address 1 CVE. Fixed in 5.3.39.tuxcare.6...

EUVD-2026-52701

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise record manager and agent memory nodes allowed users to set arbitrary TypeORM DataSource options through the additionalConfig input in...

ROOT-APP-NPM-CVE-2023-26116 CVE-2023-26116 in angular - Patched by Root

Root has patched CVE-2023-26116 in the angular package for Root:npm. Multiple fixed versions available...

RLSA-2026:49525 Important: perl-Archive-Tar security update

Archive::Tar provides an object oriented mechanism for handling tar files. It provides class methods for quick and easy files handling while also allowing for the creation of tar file objects for custom manipulation. If you have the IO::Zlib module installed, Archive::Tar will also support...

frr10 security, bug fix, and enhancement update

An update is available for frr10. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list FRRouting is free software that manages TCP/IP based routing protocols. It take...

frr security update

An update is available for frr. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list FRRouting is free software that manages TCP/IP based routing protocols. It suppor...

cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing

Summarypkcs7decryptder, pkcs7decryptpem, and pkcs7decryptsmime reported theoutcome of decrypting a RecipientInfo's encryptedKey in severaldistinguishable ways, one of which disclosed the exact length recovered from theRSA operation. The same distinction was also observable by timing. Anapplicatio...