CLSA-2026-1792588191 TuxCare security update for org.springframework.security (9 CVEs)

TuxCare rebuilt 13 org.springframework.security packages to address 9 CVEs. Fixed in 3.2.8.RELEASE-tuxcare.1...

CLSA-2026-1792587913 TuxCare security update for org.acegisecurity (2 CVEs)

TuxCare rebuilt 12 org.acegisecurity packages to address 2 CVEs. Fixed in 1.0.7-tuxcare.1...

CLSA-2026-1792587283 TuxCare security update for org.springframework (9 CVEs)

TuxCare rebuilt 25 org.springframework packages to address 9 CVEs. Fixed in 6.0.0-tuxcare.5...

CVE-2026-114387 Shopper 2.0.0 before 2.6.0 Privilege Escalation via Unguarded Livewire Components

Shopper from 2.0.0 before 2.6.0 contains a missing authorization vulnerability that allows admin-panel users holding only accessdashboard to create administrators and grant permissions. Attackers can call CreateTeamMember::store or Permissions::togglePermission directly over /livewire/update to...

CVE-2026-114387 Shopper 2.0.0 before 2.6.0 Privilege Escalation via Unguarded Livewire Components

Shopper from 2.0.0 before 2.6.0 contains a missing authorization vulnerability that allows admin-panel users holding only accessdashboard to create administrators and grant permissions. Attackers can call CreateTeamMember::store or Permissions::togglePermission directly over /livewire/update to...

EUVD-2026-107234

Shopper from 2.0.0 before 2.6.0 contains a missing authorization vulnerability that allows admin-panel users holding only accessdashboard to create administrators and grant permissions. Attackers can call CreateTeamMember::store or Permissions::togglePermission directly over /livewire/update to...

CVE-2026-114387

Shopper versions 2.0.0 before 2.6.0 are vulnerable to a privilege escalation flaw due to missing authorization in Livewire components. Users with only access_dashboard privileges can bypass intended restrictions by directly calling CreateTeamMember::store() or Permissions::togglePermission() via ...

CLSA-2026-1792585696 TuxCare security update for org.springframework (8 CVEs)

TuxCare rebuilt 25 org.springframework packages to address 8 CVEs. Fixed in 6.0.11-tuxcare.6...

CLSA-2026-1792585518 TuxCare security update for org.springframework (8 CVEs)

TuxCare rebuilt 25 org.springframework packages to address 8 CVEs. Fixed in 6.0.12-tuxcare.6...

CLSA-2026-1792584150 TuxCare security update for org.springframework (5 CVEs)

TuxCare rebuilt 25 org.springframework packages to address 5 CVEs. Fixed in 6.1.13-tuxcare.4...

CLSA-2023-1682604577 Fix of 54 CVEs

CVE-2022-1198 - drivers: hamradio: 6pack: fix UAF bug caused by modtimer Bionic update: upstream stable patchset 2022-03-04 LP: 1963717 // CVE-2020-36516 - ipv4: avoid using shared IP generator for connected sockets CVE-2022-36879 - xfrm: xfrmpolicy: fix a possible double xfrmpolsput in...

CLSA-2026-1792582435 TuxCare security update for sigstore (1 CVE)

TuxCare rebuilt sigstore to address 1 CVE. Fixed in 1.9.0-tuxcare.1...

CLSA-2026-1792582427 TuxCare security update for launch-editor (3 CVEs)

TuxCare rebuilt launch-editor to address 3 CVEs. Fixed in 2.2.1-tuxcare.2...

CLSA-2026-1792577892 TuxCare security update for org.springframework (2 CVEs)

TuxCare rebuilt 26 org.springframework packages to address 2 CVEs. Fixed in 6.2.13-tuxcare.4...

CLSA-2026-1792576955 TuxCare security update for org.springframework (2 CVEs)

TuxCare rebuilt 26 org.springframework packages to address 2 CVEs. Fixed in 6.2.5-tuxcare.3...

CLSA-2026-1792575333 TuxCare security update for org.springframework (34 CVEs)

TuxCare rebuilt 22 org.springframework packages to address 34 CVEs. Fixed in 5.1.7.RELEASE-tuxcare.1...

CLSA-2026-1792575257 TuxCare security update for 36 packages (32 CVEs)

TuxCare rebuilt 36 packages to address 32 CVEs. Fixed in 9.0.24-tuxcare.1...

CLSA-2026-1792574765 TuxCare security update for @modelcontextprotocol/sdk (2 CVEs)

TuxCare rebuilt @modelcontextprotocol/sdk to address 2 CVEs. Fixed in 1.30.1-tuxcare.2...

CLSA-2026-1792574714 TuxCare security update for launch-editor (3 CVEs)

TuxCare rebuilt launch-editor to address 3 CVEs. Fixed in 2.6.1-tuxcare.2...

CLSA-2026-1778261513 Fix CVE(s): CVE-2026-43284

Miscellaneous Ubuntu changes - Packaging: add tuxcare suffix Miscellaneous upstream changes - xfrm: esp: avoid in-place decrypt on shared skb frags - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present...