CLSA-2026-1788560420 TuxCare security update for ws (3 CVEs)

TuxCare rebuilt ws to address 3 CVEs. Fixed in 7.4.5-tuxcare.1...

CLSA-2026-1788560406 TuxCare security update for ws (3 CVEs)

TuxCare rebuilt ws to address 3 CVEs. Fixed in 8.13.0-tuxcare.1...

CLSA-2026-1788560246 TuxCare security update for dset (1 CVE)

TuxCare rebuilt dset to address 1 CVE. Fixed in 3.1.2-tuxcare.1...

CLSA-2026-1788555932 TuxCare security update for org.springframework (1 CVE)

TuxCare rebuilt 2 org.springframework packages to address 1 CVE. Fixed in 6.1.7-tuxcare.5...

CLSA-2026-1788553383 TuxCare security update for log4js (1 CVE)

TuxCare rebuilt log4js to address 1 CVE. Fixed in 3.0.3-tuxcare.1...

CLSA-2026-1788553382 TuxCare security update for highlight.js (1 CVE)

TuxCare rebuilt highlight.js to address 1 CVE. Fixed in 8.9.1-tuxcare.1...

CLSA-2026-1788550289 TuxCare security update for 3 packages (4 CVEs)

TuxCare rebuilt 3 packages to address 4 CVEs. Fixed in 10.1.42-tuxcare.9...

CLSA-2026-1788547319 TuxCare security update for org.springframework (1 CVE)

TuxCare rebuilt 2 org.springframework packages to address 1 CVE. Fixed in 6.1.19-tuxcare.4...

CLSA-2026-1788547257 TuxCare security update for org.springframework:spring-expression (1 CVE)

TuxCare rebuilt org.springframework:spring-expression to address 1 CVE. Fixed in 6.0.11-tuxcare.4...

CLSA-2026-1788547255 TuxCare security update for org.springframework:spring-web (1 CVE)

TuxCare rebuilt org.springframework:spring-web to address 1 CVE. Fixed in 6.1.16-tuxcare.4...

CVE-2026-80904

In the Linux kernel, the following vulnerability has been resolved: net/tls: Fail tlsswspliceread after a failed async decrypt When an async decrypt fails, tlsdecryptdone records the error in ctx-asyncwait.err and calls tlserrabort, which stores it in skerr. tlsswrecvmsg and tlsswreadsock each re...

[SECURITY] [DSA 6483-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6483-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 04, 2026 https://www.debian.org/security/faq -...

Updated microcode packages fix security vulnerabilities

A potential security vulnerability for some Intel® Xeon® 6 processor with Intel® Trust Domain Extensions Intel® TDX may allow escalation of privilege. CVE-2025-31936 A potential security vulnerability in some Intel® Xeon® 6 processor with Intel® Trust Domain Extensions Intel® TDX may allow...

Updated tomcat packages fix security vulnerabilities

Incorrect URL decoding in RewriteValve may allow security control bypass. CVE-2026-59083 EncryptInterceptor requirements not clearly documented. CVE-2026-59084 DoS via WebSocket chat example. CVE-2026-66299 Bypass longest prefix security constraint. CVE-2026-65182 TOCTOU when setting specific...

authelia v4.39.22

!OpenSSF Scorecardhttps://shieldcn.dev/badge/dynamic/json.svg?url=https://img.shields.io/ossf-scorecard/github.com/authelia/authelia.json&query=$.message&label=openssf%20scorecard&logo=data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmc...

UBUNTU-CVE-2026-80841

In the Linux kernel, the following vulnerability has been resolved: net/packet: defer vmalloc TXRING free until skbs finish AFPACKET TXRING skbs keep a raw pointer to their ring frame. The skb page references preserve page-backed ring blocks after pgvec is freed, but they do not preserve a vmallo...

CLSA-2026-1788536930 TuxCare security update for org.springframework:spring-web (1 CVE)

TuxCare rebuilt org.springframework:spring-web to address 1 CVE. Fixed in 6.1.4-tuxcare.5...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana12.4: grafana12.4-12.4.9-0.6.hum1 aarch64, x8664 grafana12.4-12.4.9-0.6.hum1.src src Security Fixes: grafana12.4: CVE-2026-84292 CVE-2026-84394...

CVE-2026-44402 Voltronic Power SNMP Web Pro 1.1 Unauthenticated RCE via upload.cgi

Voltronic Power SNMP Web Pro 1.1 contains an unauthenticated remote code execution vulnerability in the upload.cgi firmware update endpoint that allows remote attackers to execute arbitrary commands as root by uploading a crafted tar archive without valid credentials. Attackers can supply a...

CVE-2026-44402

Voltronic Power SNMP Web Pro 1.1 suffers from an unauthenticated remote code execution vulnerability in the upload.cgi firmware update endpoint. The backend fails to validate session cookies (a single Cookie: -http-session-=NOT_VALID header bypasses authentication), and the firmware install proce...