2109644 matches found
CGA-8H5P-XFM7-8842
Bulletin has no description...
CGA-QP5H-77VW-XVMC
Bulletin has no description...
ECHO-088C-1462-CA4C
Bulletin has no description...
ECHO-0E64-158A-542B
Bulletin has no description...
CGA-Q4CX-MR93-QC6H
Bulletin has no description...
CGA-7FXG-8XV5-FR26
Bulletin has no description...
ECHO-5352-3F6E-0C72
Bulletin has no description...
ECHO-0C4C-8C22-BE6A
Bulletin has no description...
ECHO-8494-A0DC-6B0C
Bulletin has no description...
ECHO-EF2E-7BA4-F184
Bulletin has no description...
ECHO-94B9-8EC3-458F
Bulletin has no description...
ROOT-APP-NPM-CVE-2026-59940 CVE-2026-59940 in seroval - Patched by Root
Root has patched CVE-2026-59940 in the seroval package for Root:npm. Multiple fixed versions available...
CLSA-2026-1790166345 TuxCare security update for adm-zip (1 CVE)
TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.17-tuxcare.2...
CGA-4QRX-39WV-224R
Bulletin has no description...
DEBIAN-CVE-2026-87022
Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling when per-message-deflate is used. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0.M1 through 9.0.121. The following...
DEBIAN-CVE-2026-86248
CLIENTCERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M14 through 11.0.25, from 10.1.22 through 10.1.59, from 9.0.92 through 9.0.121. Users are recommended to upgrade to versi...
DEBIAN-CVE-2026-86350
Inconsistent interpretation of HTTP/2 requests 'HTTP Request/Response smuggling' vulnerability in Apache Tomcat caused by a regression in fix for CVE-2026-41293 can trigger request header mix-up. This issue affects Apache Tomcat: from 11.0.22 through 11.0.25, from 10.1.55 through 10.1.59, from...
DEBIAN-CVE-2026-79677
Missing release of resource after effective lifetime, Comparison using wrong factors vulnerability in Apache Tomcat allows a denial of service as a result of lost time outs for asynchronous WebSocket writes. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through...
DEBIAN-CVE-2026-78437
Incomplete cleanup vulnerability in Apache Tomcat allows a malformed request to potentially depends on timing cause one request from another user to fail. This issue affects Apache Tomcat: from 11.0.19 through 11.0.25, from 10.1.53 through 10.1.59, from 9.0.116 through 9.0.121. Users are...
DEBIAN-CVE-2026-78383
Allocation of resources without limits or throttling vulnerability in Apache Tomcat allows an unauthenticated AJP request to pin an AJP processing thread leading to denial of service. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0.M1...
DEBIAN-CVE-2026-76183
Authentication Bypass by Alternate Name vulnerability in Apache Tomcat allowed the security constraints for any WebSocket endpoint to be bypassed. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0.M1 through 9.0.121. The following version...
DEBIAN-CVE-2026-75973
Improper Authentication vulnerability in Apache Tomcat. When Jakarta Authentication was configured with SimpleAuthConfigProvider as the default provider and multiple web application used that provider, the realm for the first web application to authenticate a request would be used for all web...
DEBIAN-CVE-2026-77791
Uncontrolled Resource Consumption vulnerability in Apache Tomcat during sending of WebSocket close message enabled a DoS attack. This issue affects Apache Tomcat: from 11.0.0-M5 through 11.0.25, from 10.1.8 through 10.1.59, from 9.0.74 through 9.0.121. The following versions were EOL at the time...
DEBIAN-CVE-2026-77756
Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in Apache Tomcat caused by processing the transfer-encoding header for an HTTP/1.0 request may allow an attacker to cause one request from another user to fail when Tomcat is located behind a reverse prox...
DEBIAN-CVE-2026-73581
Improper Check for Certificate Revocation vulnerability in Apache Tomcat. Both the OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.58, from 9.0.0-M1 through...
DEBIAN-CVE-2026-77762
Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Tomcat allows an attacker to inject trailer fields into another HTTP/2 request. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from...
CLSA-2026-1790165044 TuxCare security update for adm-zip (1 CVE)
TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.12-tuxcare.1...
ROOT-APP-MAVEN-CVE-2026-40972 CVE-2026-40972 in org.springframework.boot:spring-boot-devtools - Patched by Root
Root has patched CVE-2026-40972 in the org.springframework.boot:spring-boot-devtools package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-40976 CVE-2026-40976 in org.springframework.boot:spring-boot - Patched by Root
Root has patched CVE-2026-40976 in the org.springframework.boot:spring-boot package for Root:Maven. Multiple fixed versions available...
RUSTSEC-2026-0305 Use-after-free when XML includes have duplicated entities
Librsvg uses libxml2, a C library, to parse XML. When librsvg parses an SVG document which has a nested Xinclude, an XML entity declaration with a duplicate name as an existing one can cause a use-after-free error. While libxml2 is expanding an internal entity, a recursive XInclude can parse...
RUSTSEC-2026-0307 `uncbv`: archive extraction is vulnerable to path traversal (zip-slip)
Summary uncbv extract writes each archive entry to outputdir.joinentryfilename using the filename stored in the archive with no check for .. components or absolute paths. A malicious .cbv / .cbz archive whose entry name contains ../ or an absolute path can therefore cause files to be written...
CGA-929F-MV84-H64W
Bulletin has no description...
CGA-X2W3-H4G7-53J8
Bulletin has no description...
ROOT-APP-MAVEN-CVE-2023-2976 CVE-2023-2976 in com.google.guava:guava - Patched by Root
Root has patched CVE-2023-2976 in the com.google.guava:guava package for Root:Maven. Multiple fixed versions available...
OPENSUSE-SU-2026:21953-1 Security update for python-asyncssh
This update for python-asyncssh fixes the following issues: Changes in python-asyncssh: - CVE-2026-62949: denial of service via infinite loop when processing zero-sized SSH packets bsc1280972...
CGA-GHCF-3XPM-GPRR
Bulletin has no description...
OPENSUSE-SU-2026:21935-1 Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issue: - CVE-2025-55154: integer overflow when performing magnified size calculations in ReadOneMNGIMage can lead to out-of- bounds write bsc1248078...
CLSA-2026-1790164156 TuxCare security update for ws (2 CVEs)
TuxCare rebuilt ws to address 2 CVEs. Fixed in 6.2.2-tuxcare.1...
CLSA-2026-1790164081 TuxCare security update for ws (2 CVEs)
TuxCare rebuilt ws to address 2 CVEs. Fixed in 8.5.0-tuxcare.1...
SUSE-SU-2026:4302-1 Security update for perl-Authen-SASL
This update for perl-Authen-SASL fixes the following issue: - CVE-2026-86219: replayed authentication responses accepted due to unverified nonce in serverstep bsc1279806...
OPENSUSE-SU-2026:21954-1 Security update for osmo-iuh
This update for osmo-iuh fixes the following issues: Changes in osmo-iuh: - CVE-2026-75894: iuclient: reject oversized RANAP NAS-PDU boo1281607...
ECHO-B652-472D-4B8D
Bulletin has no description...
ECHO-AC54-A599-3035
Bulletin has no description...
ECHO-60E6-3169-A982
Bulletin has no description...
ECHO-2D66-2137-D02B
Bulletin has no description...
ECHO-8095-238B-F99C
Bulletin has no description...
CLSA-2026-1790162728 TuxCare security update for 14 packages (1 CVE)
TuxCare rebuilt 14 packages to address 1 CVE. Fixed in 3.2.4-tuxcare.3...
CLSA-2026-1790162696 TuxCare security update for adm-zip (1 CVE)
TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.16-tuxcare.1...