Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: drm/amd/display: Atom Integrated System Info v22 for DCN35 A new request from KMD/VBIOS is to support a new UMA carveout model. This resolves a null dereference issue when accessing Ctx-dcbios-integratedinfo, as this variable...

CLSA-2026-1782781173 TuxCare security update for org.apache.struts (3 CVEs)

TuxCare rebuilt 33 org.apache.struts packages to address 3 CVEs. Fixed in 2.5.33-tuxcare.2...

CLSA-2026-1778633134 TuxCare security update for 8 packages (1 CVE)

TuxCare rebuilt 8 packages to address 1 CVE. Fixed in 8.5.100-tuxcare.10...

CLSA-2026-1777250296 TuxCare security update for 9 packages (3 CVEs)

TuxCare rebuilt 9 packages to address 3 CVEs. Fixed in 8.5.100-tuxcare.9...

CLSA-2026-1776818211 TuxCare security update for 9 packages (1 CVE)

TuxCare rebuilt 9 packages to address 1 CVE. Fixed in 8.5.100-tuxcare.8...

CLSA-2026-1775608273 TuxCare security update for org.apache.tomcat (1 CVE)

TuxCare rebuilt 5 org.apache.tomcat packages to address 1 CVE. Fixed in 8.5.100-tuxcare.7...

CLSA-2025-1765411682 TuxCare security update for 8 packages (3 CVEs)

TuxCare rebuilt 8 packages to address 3 CVEs. Fixed in 8.5.100-tuxcare.5...

CLSA-2025-1765411679 TuxCare security update for 8 packages (2 CVEs)

TuxCare rebuilt 8 packages to address 2 CVEs. Fixed in 8.5.100-tuxcare.4...

CLSA-2025-1761005194 TuxCare security update for 8 packages (1 CVE)

TuxCare rebuilt 8 packages to address 1 CVE. Fixed in 8.5.100-tuxcare.3...

CLSA-2025-1751500955 TuxCare security update for 8 packages (10 CVEs)

TuxCare rebuilt 8 packages to address 10 CVEs. Fixed in 8.5.100.tuxcare.1...

CLSA-2025-1753056170 TuxCare security update for 7 packages (1 CVE)

TuxCare rebuilt 7 packages to address 1 CVE. Fixed in 8.5.100.tuxcare.2...

Wordfence Intelligence Weekly WordPress Vulnerability Report (July 20, 2026 to July 26, 2026)

Last week, there were 264 vulnerabilities disclosed in 210 WordPress Plugins and 6 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 117 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilitie...

CLEANSTART-2026-BI40968 Security fixes in grafana-rollout-operator 0.35.0-r0

Package grafana-rollout-operator version 0.35.0-r0 fixes 7 vulnerabilities: CVE-2026-25679, ghsa-p77j-4mvh-x3m3, CVE-2026-27138, CVE-2026-27137, CVE-2026-27142...

CLEANSTART-2026-GG76815 Security fixes in tempo-fips 2.7.2-r0

Package tempo-fips version 2.7.2-r0 fixes 35 vulnerabilities: CVE-2026-33186, CVE-2025-22869, CVE-2025-47914, CVE-2025-58181, CVE-2025-47913...

CLEANSTART-2026-LY12450 Security fixes in certificate-transparency-trillian-ctserver 1.3.2-r2

Package certificate-transparency-trillian-ctserver version 1.3.2-r2 fixes 35 vulnerabilities: ghsa-9jj7-4m8r-rfcm, ghsa-mh2q-q3fh-2475, CVE-2026-39820, CVE-2026-27143, CVE-2026-42499...

CLEANSTART-2026-KK78041 Security fixes in weaviate 1.35.2-r0

Package weaviate version 1.35.2-r0 fixes 5 vulnerabilities: ghsa-j5w8-q4qc-rx2x, CVE-2025-68121, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730...

CLEANSTART-2026-YF99196 Security fixes in promxy-fips 0.0.93-r1

Package promxy-fips version 0.0.93-r1 fixes 35 vulnerabilities: CVE-2023-40577, CVE-2026-2303, CVE-2026-29181, CVE-2026-39827, CVE-2026-39828...

CVE-2026-53447 Wekan: `cloneBoard` Meteor method has no authorization check — any user can clone (read) any private board by ID

Wekan is open source kanban built with Meteor. Prior to 9.35, the Wekan cloneBoard Meteor method in models/import.js uses caller-supplied sourceBoardId to build a board export through models/exporter.js without invoking canExport or checking source-board membership. Any authenticated user who kno...

EUVD-2026-44835

Wekan is open source kanban built with Meteor. Prior to 9.35, the Wekan cloneBoard Meteor method in models/import.js uses caller-supplied sourceBoardId to build a board export through models/exporter.js without invoking canExport or checking source-board membership. Any authenticated user who kno...

CVE-2026-53447 Wekan: `cloneBoard` Meteor method has no authorization check — any user can clone (read) any private board by ID

Wekan is open source kanban built with Meteor. Prior to 9.35, the Wekan cloneBoard Meteor method in models/import.js uses caller-supplied sourceBoardId to build a board export through models/exporter.js without invoking canExport or checking source-board membership. Any authenticated user who kno...