472415 matches found
[SECURITY] Fedora 45 Update: elixir-1.20.4-1.fc45
Elixir is a programming language built on top of the Erlang VM. As Erlang, it is a functional language built to support distributed, fault-tolerant, non-stop applications with hot code swapping...
PT-2026-91287
A vulnerability has been found in DjangoCRM django-crm up to 1.2. This vulnerability affects the function BulkUpdateCasesView of the file backend/cases/bulk views.py of the component Bulk Case Update. The manipulation leads to missing authorization. The attack is possible to be carried out...
gstreamer1-plugins-base security update
1.16.1-7.0.1 - Update origin URL Orabug: 36209826 1.16.1-7 - Add patch for CVE-2026-85150 Resolves: RHEL-253741 1.16.1-6.1 - Add patch for CVE-2026-18297 Resolves: RHEL-246576...
ALSA-2026:67155 Moderate: perl security update
Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fixes: perl: Perl: Incorrect regular expression processing via large regular expressions CVE-2026-13221 For more details about the security issues, including the impac...
CVE-2026-54180: Authorization Bypass Through User-Controlled Key
backpack/crud provides Create, Read, Update & Delete CRUD functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 until 6.8.14 and 7.0.38, the Update, Delete, and Reorder operations resolve records from the unscoped model query inste...
PT-2026-91139
Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to validate channel action ownership which allows channel managers to update actions in other channels via the channel action update endpoint.. Mattermost Advisory ID: MMSA-2026-00692...
PT-2026-91198
Incorrect Authorization vulnerability in Apache Syncope. An administrator with ClientApp's update entitlement is unable to perform the related operation, while ClientApp's create entitlement is checked both for create and update operations on ClientApp. This issue affects Apache Syncope: from...
osbuild-composer security update
176-1.0.3 - Fix CVE-2026-41178, CVE-2026-55677, CVE-2026-25681, CVE-2026-27136, CVE-2026-42502, CVE-2026-39821...
openssl security, bug fix, and enhancement update
3.5.8-1.0.1 - Replace upstream references Orabug: 34340177 - Update FIPS provider name Orabug: 35824276 1:3.5.8-1 - Rebase to OpenSSL 3.5.8 Resolves: RHEL-242944 Resolves: RHEL-246254 Resolves: RHEL-246266 Resolves: RHEL-246306 Resolves: RHEL-246437 Resolves: RHEL-246441 Resolves: RHEL-246445...
rust security update
1.92.0-2 - Apply libgit2 fix for CVE-2026-53587...
git-lfs security update
3.4.1-13 - Rebuild with new Golang - Resolves: RHEL-241521, RHEL-242322, RHEL-241889...
CVE-2026-10542: Authorization Bypass Through User-Controlled Key
Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to validate channel action ownership which allows channel managers to update actions in other channels via the channel action update endpoint.. Mattermost Advisory ID: MMSA-2026-00692...
About the security content of macOS Golden Gate 27
About the security content of macOS Golden Gate 27 This document describes the security content of macOS Golden Gate 27. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
About the security content of tvOS 27
About the security content of tvOS 27 This document describes the security content of tvOS 27. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent...
openssl security, bug fix, and enhancement update
3.5.8-1.0.1 - Replace upstream references Orabug: 34340177 3.5.8.openela.0.1 - Add OpenELA specific changes 1:3.5.8-1 - Rebase to OpenSSL 3.5.8 Resolves: RHEL-242945 Resolves: RHEL-246260 Resolves: RHEL-246284 Resolves: RHEL-246319 Resolves: RHEL-246439 Resolves: RHEL-246443 Resolves: RHEL-246447...
CVE-2026-82519: Missing Authorization
Really Simple Security plugin for WordPress before 9.8.2 contains a missing authorization check vulnerability that allows authenticated low-privileged attackers to bypass enforced two-factor authentication indefinitely by exploiting an unguarded code path in the profile-page update handler...
rust security update
1.92.0-2 - Apply libgit2 fix for CVE-2026-53587...
CVE-2026-90806: Missing Authorization
A vulnerability has been found in DjangoCRM django-crm up to 1.2. This vulnerability affects the function BulkUpdateCasesView of the file backend/cases/bulkviews.py of the component Bulk Case Update. The manipulation leads to missing authorization. The attack is possible to be carried out remotel...