libreswan: badly formatted X.509 certificate can cause an assertion failure that crashes the daemon process

No description is available for this CVE...

Updated nginx packages fix security vulnerabilities

CVE-2026-42533: Heap buffer overflow might occur in a worker process when using the map directive with regex matching if the map variable was included in a string expression after a capture affected by this map; a similar issue might happen when using a non-cacheable variable in a string...

GHSA-HPCC-26XQ-25FV vulnerabilities

Vulnerabilities for packages: apache-hop-fips, camunda, strimzi-kafka-operator...

CVE-2026-56816 vulnerabilities

Vulnerabilities for packages: apache-hop-fips, camunda, strimzi-kafka-operator...

GHSA-V245-V573-V5VM vulnerabilities

Vulnerabilities for packages: kibana, gitlab-rails-ce...

CVE-2026-59887 vulnerabilities

Vulnerabilities for packages: kibana, gitlab-rails-ce...

CVE-2026-13676 vulnerabilities

Vulnerabilities for packages: kibana...

GHSA-4C8G-83QW-93J6 vulnerabilities

Vulnerabilities for packages: kibana...

GHSA-MFG7-5GFP-C4W3 vulnerabilities

Vulnerabilities for packages: pinot-fips, camunda-zeebe, apicurio-registry, camunda, apicurio-registry-fips, apache-hop-fips, floci, knative-kafka-broker-fips, airbyte-server, request-9047-keycloak-fips...

CVE-2026-56816 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator...

CVE-2026-39244 vulnerabilities

Vulnerabilities for packages: sqlpad...

GHSA-XCPC-8H2W-3J85 vulnerabilities

Vulnerabilities for packages: sqlpad...

CVE-2026-14257 vulnerabilities

Vulnerabilities for packages: sqlpad, pulumi, npm...

GHSA-MH99-V99M-4GVG vulnerabilities

Vulnerabilities for packages: sqlpad, pulumi, npm...

CVE-2026-64553

In the Linux kernel, the following vulnerability has been resolved: net: psample: fix info leak in PSAMPLEATTRDATA psample open codes nlaput presumably to avoid wiping the data with 0s just to override it with packet data. This open coding is missing clearing the pad, however, each netlink attr i...

CVE-2026-64554

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: fix stale prevhdr pointer in brip6fragment brip6fragment gets prevhdr, a pointer into the skb head, from ip6find1stfragopt, then calls skbchecksumhelp. For a cloned skb skbchecksumhelp reallocates the head via...

CVE-2026-64551

In the Linux kernel, the following vulnerability has been resolved: sctp: validate STALECOOKIE cause length before reading staleness When an ERROR chunk with a STALECOOKIE cause is received in the COOKIEECHOED state, sctpsfdo526stale reads the 4-byte Measure of Staleness that follows the cause...

CVE-2026-64552

In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix len check in receivebig receivebig bounds the device-announced length by bigpacketsnumskbfrags + 1 PAGESIZE. That is still too loose: addrecvbufbig sets sg1 to start at offset sizeofstruct paddedvnethdr into the...

CVE-2026-64550

In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: validate MAP frame length before ingress parsing When ingress deaggregation is disabled, rmnetmapingresshandler passes the skb straight to rmnetmapingresshandler, skipping the length validation that...

CVE-2026-64549

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bpa10x: avoid OOB read of revision string in bpa10xsetup bpa10xsetup sends the vendor command 0xfc0e and passes the response to btdevinfo and hcisetfwinfo as a "%s" string starting at skb-data + 1, without checking the...