[SECURITY] [DSA 6399-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6399-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 23, 2026 https://www.debian.org/security/faq -...

CVE-2026-46582 affecting package unbound for versions less than 1.25.2-1

CVE-2026-46582 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-55973 affecting package unbound for versions less than 1.25.2-1

CVE-2026-55973 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-55717 affecting package unbound for versions less than 1.25.2-1

CVE-2026-55717 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-32665 affecting package unbound for versions less than 1.25.2-1

CVE-2026-32665 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-55708 affecting package unbound for versions less than 1.25.2-1

CVE-2026-55708 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-50045 affecting package unbound for versions less than 1.25.2-1

CVE-2026-50045 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-44690 affecting package unbound for versions less than 1.25.2-1

CVE-2026-44690 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-56444 affecting package unbound for versions less than 1.25.2-1

CVE-2026-56444 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-44687 affecting package unbound for versions less than 1.25.2-1

CVE-2026-44687 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-50248 affecting package unbound for versions less than 1.25.2-1

CVE-2026-50248 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-55991 affecting package unbound for versions less than 1.25.2-1

CVE-2026-55991 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-16796 Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()

Improper neutralization of argument delimiters in the installpackages method in AWS Bedrock AgentCore Python SDK before 1.18.1 might allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via crafted package name arguments. To mitigate this issue, user...

CVE-2026-16796

The vulnerability CVE-2026-16796 affects the AWS Bedrock AgentCore Python SDK install_packages() function; due to improper neutralization of argument delimiters, a remote authenticated user could execute arbitrary commands within the Code Interpreter sandbox when using SDK versions before 1.18.1....

Security Bulletin: Unauthenticated File Upload Vulnerability Allows Disk Space Exhaustion and Path Disclosure in Langflow OSS

Summary Unauthenticated users can upload unlimited files to the Langflow OSS server via the deprecated /api/v1/upload/flowid endpoint without authentication or validation, leading to potential disk space exhaustion DoS and information disclosure through absolute file path leakage in API responses...

Security Bulletin: Path Traversal Vulnerability in File Processing Components Allows Unauthorized File System Access and Potential Remote Code Execution

Summary A path traversal vulnerability exists in multiple Langflow OSS file processing components Docling, Docling Serve, Read File, NVIDIA Retriever Extraction, Video File, and Unstructured API that are based on BaseFileComponent. The vulnerability in the unpackbundle function allows attackers t...

Open Redirect

Overview Affected versions of this package are vulnerable to Open Redirect via the navigation mechanisms when attacker-supplied paths containing a backslash are processed. An attacker can redirect users to unintended external sites by crafting malicious links or inputs. Remediation Upgrade...

find-my-way: DDoS with HTTP2

Impact Remotely triggerable DoS in find-my-way when it is used with Node's HTTP/2 server. The short version is that lookup passes req.method into find, and find indexes this.treesmethod. Since this.trees is a normal object, HTTP/2 method values like constructor, toString, or proto can resolve...

CVE-2026-16756

Missing connection and header-read timeouts and the absence of a concurrent-connection cap in the default serve path of Amazon aws-smithy-http-server might allow remote attackers to cause a denial of service by opening many connections and sending partial requests that are never completed,...

CVE-2026-16756 Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of service

Missing connection and header-read timeouts and the absence of a concurrent-connection cap in the default serve path of Amazon aws-smithy-http-server might allow remote attackers to cause a denial of service by opening many connections and sending partial requests that are never completed,...