472938 matches found
Shopper: Media sub-form store() still lacks authorization (Incomplete fix for GHSA-h4mp-g9c6-xwph)
Title Missing authorization on Media sub-form store action allows unpermissioned product media update Description A lack of authorization control on the store method was found in packages/admin/src/Livewire/Components/Products/Form/Media.php. The security fix released for GHSA-h4mp-g9c6-xwph adde...
CLSA-2026-1789161525 TuxCare security update for validator (2 CVEs)
TuxCare rebuilt validator to address 2 CVEs. Fixed in 7.2.0-tuxcare.1...
CLSA-2026-1789161501 TuxCare security update for validator (1 CVE)
TuxCare rebuilt validator to address 1 CVE. Fixed in 4.4.0-tuxcare.1...
CLSA-2026-1789161495 TuxCare security update for mout (1 CVE)
TuxCare rebuilt mout to address 1 CVE. Fixed in 0.11.1-tuxcare.2...
CLSA-2026-1789160133 TuxCare security update for 2 packages (1 CVE)
TuxCare rebuilt 2 packages to address 1 CVE. Fixed in 5.24.0-tuxcare.1...
CLSA-2026-1789159896 TuxCare security update for fastify (2 CVEs)
TuxCare rebuilt fastify to address 2 CVEs. Fixed in 5.7.4-tuxcare.1...
CLSA-2026-1789159895 TuxCare security update for 3 packages (1 CVE)
TuxCare rebuilt 3 packages to address 1 CVE. Fixed in 6.30.3-tuxcare.2...
CLSA-2026-1789159797 TuxCare security update for bn.js (1 CVE)
TuxCare rebuilt bn.js to address 1 CVE. Fixed in 4.11.6-tuxcare.1...
CLSA-2026-1789159763 TuxCare security update for fresh (1 CVE)
TuxCare rebuilt fresh to address 1 CVE. Fixed in 0.2.2-tuxcare.1...
CLSA-2026-1789159265 TuxCare security update for 123 packages (1 CVE)
TuxCare rebuilt 123 packages to address 1 CVE. Fixed in 11.0.31.tuxcare0001...
CVE-2026-89752
In the Linux kernel, the following vulnerability has been resolved: mm: memcg: stop reclaim when a limit update is superseded kernfs serializes file operations only per open file, so separate open files can update the same memory.high or memory.max file concurrently. Both handlers store the new...
DEBIAN-CVE-2026-89752
In the Linux kernel, the following vulnerability has been resolved: mm: memcg: stop reclaim when a limit update is superseded kernfs serializes file operations only per open file, so separate open files can update the same memory.high or memory.max file concurrently. Both handlers store the new...
CVE-2026-89752
In the Linux kernel, the following vulnerability has been resolved: mm: memcg: stop reclaim when a limit update is superseded kernfs serializes file operations only per open file, so separate open files can update the same memory.high or memory.max file concurrently. Both handlers store the new...
DEBIAN-CVE-2026-89595
In the Linux kernel, the following vulnerability has been resolved: fsnotify: Fix stale object mask after concurrent mark updates When a mark gets a new event bit, fanotify and inotify may avoid recalculating the object mask if the cached aggregate already contains that bit. This is racy with a...
EUVD-2026-76664
In the Linux kernel, the following vulnerability has been resolved: mm: memcg: stop reclaim when a limit update is superseded kernfs serializes file operations only per open file, so separate open files can update the same memory.high or memory.max file concurrently. Both handlers store the new...
CVE-2026-89752
In the Linux kernel, the following vulnerability has been resolved: mm: memcg: stop reclaim when a limit update is superseded kernfs serializes file operations only per open file, so separate open files can update the same memory.high or memory.max file concurrently. Both handlers store the new...
CVE-2026-89595
CVE-2026-89595 is a race condition in the Linux kernel's fsnotify subsystem affecting both fanotify and inotify . When concurrent updates modify different marks on the same connector, a scanning thread can read a mark before a new event bit is added, while the updater skips recalculation, leaving...
CLSA-2026-1789155876 TuxCare security update for dompurify (2 CVEs)
TuxCare rebuilt dompurify to address 2 CVEs. Fixed in 2.5.8-tuxcare.7...
CVE-2026-89499
CVE-2026-89499 affects the Linux kernel ring-buffer component. When the remote swap_reader_page callback returns -EBUSY (e.g., during an event storm on a small buffer), __rb_get_reader_page_from_remote() incorrectly continues with an unchanged reader ID and rearranges the local page list as thoug...