CLSA-2026-1790845807 TuxCare security update for django (2 CVEs)

TuxCare rebuilt django to address 2 CVEs. Fixed in 5.0.post16+tuxcare...

CLSA-2026-1790845756 TuxCare security update for django (2 CVEs)

TuxCare rebuilt django to address 2 CVEs. Fixed in 5.1.post11+tuxcare...

CLSA-2026-1790845039 TuxCare security update for django (2 CVEs)

TuxCare rebuilt django to address 2 CVEs. Fixed in 5.1.4.post8+tuxcare...

CLEANSTART-2024-JW57154 libfreerdp/core/update

Security vulnerability affects the freerdp package. libfreerdp/core/update...

CLEANSTART-2026-WY00600 If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources

Security vulnerability affects the docker-cli-buildx package. If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources...

WordPress WP Fusion Lite plugin < 3.48.0 - Unauthenticated CRM Integration Settings Update vulnerability

Unauthenticated CRM Integration Settings Update vulnerability discovered by Naoki Kawahigashi in WordPress Plugin WP Fusion Lite versions 3.48.0...

CLSA-2026-1790831290 TuxCare security update for tornado (2 CVEs)

TuxCare rebuilt tornado to address 2 CVEs. Fixed in 6.1.0.post9+tuxcare...

CLEANSTART-2026-TP37792 If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources

CVE-2026-32283 affects multiple packages. If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. See references for individual vulnerability details...

PT-2026-103990

GetSimple CMS is a content management system CMS, and GetSimple CMS CE is the community edition of that CMS. Prior to version 1.5, the update handler fetches a user-supplied URL with file get contents after only format validation FILTER VALIDATE URL — there is no validation of the request...

PT-2026-103715

Name of the Vulnerable Software and Affected Versions ByteCoreStack – MCP Connector for AI Tools versions prior to 1.2.4 Description Authenticated users with Subscriber-level access or higher can elevate their privileges to Administrator. The issue exists in the execute tool function within the w...

gvfs security update

1.54.4-4.1 - Backport several CVE fixes CVE-2026-84268, CVE-2026-88924 Resolves: RHEL-252305, RHEL-257341 1.54.4-4 - udisks2: Correct add to hash table for items which can clash in the monitor RHEL-143935...

gvfs security update

1.48.1-8.1 - Backport several CVE fixes CVE-2026-84268, CVE-2026-88924 Resolves: RHEL-252312, RHEL-257348...

CVE-2026-56662: Cross-Site Request Forgery (CSRF)

GetSimple CMS is a content management system CMS, and GetSimple CMS CE is the community edition of that CMS. Prior to version 1.5, the UpdateCE update form contained no anti-CSRF token, and the POST handler performed no token or request-origin verification. A remote attacker can host a page that...

VulnCheck KEV: CVE-2021-36580

Open Redirect vulnerability exists in IceWarp MailServer IceWarp Server Deep Castle 2 Update 1 13.0.1.2 via the referer parameter...

PT-2026-105835

Summary A critical Confused Deputy Arbitrary File Read & Exfiltration vulnerability in the Atlassian MCP server Python allows an AI agent to exfiltrate sensitive host files and environment secrets. By providing absolute system paths to the attachments parameter of the update issue tool, an agent...

Security update for glibc (important)

openSUSE security update: security update for glibc ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21968-1 Rating: important References: bsc1274723 bsc1274726 bsc1276892 bsc1276946 bsc1277247 bsc1277262 bsc1277921 bsc1277922 bsc1281297 bsc1282509...

Rocky Linux 8.6 [CIQ] Security Update: cups-filters / cups-filters-debuginfo / cups-filters-debugsource / etc (ciqsa-2026_1040)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261040 advisory. This advisory aggregates security fixes for the cups-filters SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2023-5388. Tenable has extracted the preceding descripti...

Rocky Linux 9.2 [CIQ] Security Update: 389-ds-base / 389-ds-base-libs / python3-lib389 Multiple Vulnerabilities (ciqsa-2026_1546)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261546 advisory. This advisory aggregates security fixes for the 389-ds-base SRPM in CIQ LTS 9.2. It addresses 3 CVEs: CVE-2024-3657, CVE-2024-2199, CVE-2026-18922. Tenab...

Rocky Linux 9.4 [CIQ] Security Update: freetype / freetype-debuginfo / freetype-debugsource / etc (ciqsa-2026_0528)

The Rocky Linux 9.4 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260528 advisory. This advisory aggregates security fixes for the freetype SRPM in CIQ LTS 9.4. It addresses 1 CVE: CVE-2025-27363. Tenable has extracted the preceding description...

Rocky Linux 9.6 [CIQ] Security Update: libblkid / libblkid-devel / libfdisk / libfdisk-devel / libmount / etc Multiple Vulnerabilities (ciqsa-2026_1400)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261400 advisory. This advisory aggregates security fixes for the util-linux SRPM in CIQ LTS 9.6. It addresses 5 CVEs: CVE-2021-3995, CVE-2021-3996, CVE-2022-0563,...