CLSA-2026-1785917668 TuxCare security update for 36 packages (3 CVEs)

TuxCare rebuilt 36 packages to address 3 CVEs. Fixed in 7.0.109-tuxcare.4...

CVE-2026-71206

Shiori's CheckToken function internal/domains/auth.go validates only the JWT's HMAC signature and returns the embedded claims.Account object unmodified, never re-fetching the account from the database. No session store or token-revocation mechanism exists in the codebase. Deleting an account or...

Non-constant time webhook bearer token comparison in webhook-secret-credentials-provider

webhook-secret-credentials-provider 16.v0cfaf0215cf5 and earlier does not use a constant-time comparison function when checking whether the provided and expected webhook bearer token are equal. This could potentially allow attackers to use statistical methods to obtain a valid webhook bearer toke...

CLSA-2026-1784769579 TuxCare security update for org.apache.logging.log4j (1 CVE)

TuxCare rebuilt 32 org.apache.logging.log4j packages to address 1 CVE. Fixed in 2.17.1-tuxcare.3...

CLSA-2026-1783472552 TuxCare security update for 38 packages (4 CVEs)

TuxCare rebuilt 38 packages to address 4 CVEs. Fixed in 9.0.50-tuxcare.11...

CLSA-2026-1778633134 TuxCare security update for 35 packages (1 CVE)

TuxCare rebuilt 35 packages to address 1 CVE. Fixed in 8.5.100-tuxcare.10...

CLSA-2026-1778546710 TuxCare security update for 36 packages (1 CVE)

TuxCare rebuilt 36 packages to address 1 CVE. Fixed in 7.0.109-tuxcare.1...

CLSA-2026-1777250296 TuxCare security update for 35 packages (3 CVEs)

TuxCare rebuilt 35 packages to address 3 CVEs. Fixed in 8.5.100-tuxcare.9...

CLSA-2026-1776991059 TuxCare security update for org.apache.logging.log4j (1 CVE)

TuxCare rebuilt 33 org.apache.logging.log4j packages to address 1 CVE. Fixed in 2.17.2-tuxcare.1...

CLSA-2026-1777250294 TuxCare security update for 38 packages (2 CVEs)

TuxCare rebuilt 38 packages to address 2 CVEs. Fixed in 9.0.46-tuxcare.6...

CLSA-2026-1776818211 TuxCare security update for 35 packages (1 CVE)

TuxCare rebuilt 35 packages to address 1 CVE. Fixed in 8.5.100-tuxcare.8...

CLSA-2026-1776645374 TuxCare security update for 38 packages (4 CVEs)

TuxCare rebuilt 38 packages to address 4 CVEs. Fixed in 9.0.87-tuxcare.6...

CLSA-2026-1776386110 TuxCare security update for 38 packages (3 CVEs)

TuxCare rebuilt 38 packages to address 3 CVEs. Fixed in 9.0.46-tuxcare.4...

CLSA-2026-1776213255 TuxCare security update for 38 packages (3 CVEs)

TuxCare rebuilt 38 packages to address 3 CVEs. Fixed in 9.0.90-tuxcare.5...

CLSA-2026-1773101695 TuxCare security update for 38 packages (1 CVE)

TuxCare rebuilt 38 packages to address 1 CVE. Fixed in 9.0.75-tuxcare.3...

CLSA-2026-1768262917 TuxCare security update for 39 packages (22 CVEs)

TuxCare rebuilt 39 packages to address 22 CVEs. Fixed in 10.1.18-tuxcare.1...

CLSA-2026-1771891820 TuxCare security update for 38 packages (1 CVE)

TuxCare rebuilt 38 packages to address 1 CVE. Fixed in 9.0.50-tuxcare.5...

CLSA-2026-1771978232 TuxCare security update for 38 packages (1 CVE)

TuxCare rebuilt 38 packages to address 1 CVE. Fixed in 9.0.90-tuxcare.3...

CLSA-2026-1770077338 TuxCare security update for 38 packages (4 CVEs)

TuxCare rebuilt 38 packages to address 4 CVEs. Fixed in 9.0.90-tuxcare.2...

CLSA-2025-1763597220 TuxCare security update for 38 packages (2 CVEs)

TuxCare rebuilt 38 packages to address 2 CVEs. Fixed in 9.0.50-tuxcare.1...