CLSA-2026-1785932316 TuxCare security update for org.springframework (3 CVEs)

TuxCare rebuilt 25 org.springframework packages to address 3 CVEs. Fixed in 6.1.21-tuxcare.8...

CLSA-2026-1783299714 TuxCare security update for axios (25 CVEs)

TuxCare rebuilt axios to address 25 CVEs. Fixed in 0.26.1-tuxcare.1...

CLSA-2026-1781571271 TuxCare security update for org.springframework (10 CVEs)

TuxCare rebuilt 25 org.springframework packages to address 10 CVEs. Fixed in 6.1.21-tuxcare.7...

CLSA-2026-1779410898 TuxCare security update for org.springframework (1 CVE)

TuxCare rebuilt 25 org.springframework packages to address 1 CVE. Fixed in 6.1.21-tuxcare.6...

CLSA-2026-1779151634 TuxCare security update for org.springframework (2 CVEs)

TuxCare rebuilt 25 org.springframework packages to address 2 CVEs. Fixed in 6.1.21-tuxcare.4...

CLSA-2026-1777855422 TuxCare security update for 4 packages (25 CVEs)

TuxCare rebuilt 4 packages to address 25 CVEs. Fixed in 0.26.1-tuxcare.1...

java-25-openjdk security update

An update is available for java-25-openjdk. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environme...

CLEANSTART-2026-CD54928 Security fixes in cass-operator-fips 1.30.0-r1

Package cass-operator-fips version 1.30.0-r1 fixes 25 vulnerabilities: ghsa-mh2q-q3fh-2475, ghsa-hfvc-g4fc-pqhx, CVE-2026-29181, CVE-2026-39883, CVE-2026-39820...

CLEANSTART-2026-VZ44314 Security fixes in cadvisor 0.57.0-r0

Package cadvisor version 0.57.0-r0 fixes 25 vulnerabilities: ghsa-mh2q-q3fh-2475, CVE-2026-29181, CVE-2026-27145, CVE-2026-42504, CVE-2026-42507...

CLEANSTART-2026-QK79485 Security fixes in docker 25.0.2-r0

Package docker version 25.0.2-r0 fixes 5 vulnerabilities: CVE-2024-23651, CVE-2024-23652, CVE-2024-23653, CVE-2024-23650, CVE-2024-24557...

SUSE SLED15: java-25-openjdk / java-25-openjdk-demo / java-25-openjdk-devel / etc (SUSE-SU-2026:3331-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3331-1 advisory. Update to upstream tag jdk-25.0.4+7 July 2026 CPU. Security issues fixed: - CVE-2026-41254: lcms: information...

fastjson-1.2.83-gadget-rce

fastjson-1.2.83-gadget-rce Fastjson 1.2.83 getResourceAsStre...

MINI-389M-P2R2-25MH

Bulletin has no description...

USN-8490-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - Cryptographic API; - DMA engine subsystem; - InfiniBand drivers; -...

USN-8545-1: Linux kernel (HWE) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - Cryptographic API; - DMA engine subsystem; - InfiniBand drivers; -...

USN-8545-1 linux-hwe-6.17 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - Cryptographic API; - DMA engine subsystem; - InfiniBand drivers; -...

Security update for go1.25-openssl (critical)

openSUSE security update: security update for go1.25-openssl ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21319-1 Rating: critical References: bsc1170826 bsc1244485 bsc1245878 bsc1256818 bsc1257692 bsc1259264 bsc1259265 bsc1259268 bsc1261653...

USN-8529-1: Linux kernel vulnerabilities

It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. CVE-2026-43503 Several security issues...

MINI-Q2G4-25MP-F2X3

Bulletin has no description...

Malicious code in @wagni_bot/wagni (npm)

The npm package @wagnibot/wagni is a supply-chain credential stealer disguised as a the campaign's own namesake handle SDK. It is one member of a coordinated campaign of 25 crypto/web3 typosquat packages published under the single npm scope @wagnibot on 2026-07-09. Each package declares a...