2110177 matches found
DEBIAN-CVE-2026-78437
Incomplete cleanup vulnerability in Apache Tomcat allows a malformed request to potentially depends on timing cause one request from another user to fail. This issue affects Apache Tomcat: from 11.0.19 through 11.0.25, from 10.1.53 through 10.1.59, from 9.0.116 through 9.0.121. Users are...
DEBIAN-CVE-2026-76183
Authentication Bypass by Alternate Name vulnerability in Apache Tomcat allowed the security constraints for any WebSocket endpoint to be bypassed. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0.M1 through 9.0.121. The following version...
DEBIAN-CVE-2026-75973
Improper Authentication vulnerability in Apache Tomcat. When Jakarta Authentication was configured with SimpleAuthConfigProvider as the default provider and multiple web application used that provider, the realm for the first web application to authenticate a request would be used for all web...
DEBIAN-CVE-2026-77791
Uncontrolled Resource Consumption vulnerability in Apache Tomcat during sending of WebSocket close message enabled a DoS attack. This issue affects Apache Tomcat: from 11.0.0-M5 through 11.0.25, from 10.1.8 through 10.1.59, from 9.0.74 through 9.0.121. The following versions were EOL at the time...
DEBIAN-CVE-2026-77756
Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in Apache Tomcat caused by processing the transfer-encoding header for an HTTP/1.0 request may allow an attacker to cause one request from another user to fail when Tomcat is located behind a reverse prox...
DEBIAN-CVE-2026-77762
Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Tomcat allows an attacker to inject trailer fields into another HTTP/2 request. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from...
DEBIAN-CVE-2026-73581
Improper Check for Certificate Revocation vulnerability in Apache Tomcat. Both the OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.58, from 9.0.0-M1 through...
CLSA-2026-1790165044 TuxCare security update for adm-zip (1 CVE)
TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.12-tuxcare.1...
ROOT-APP-MAVEN-CVE-2026-40976 CVE-2026-40976 in org.springframework.boot:spring-boot - Patched by Root
Root has patched CVE-2026-40976 in the org.springframework.boot:spring-boot package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-40972 CVE-2026-40972 in org.springframework.boot:spring-boot-devtools - Patched by Root
Root has patched CVE-2026-40972 in the org.springframework.boot:spring-boot-devtools package for Root:Maven. Multiple fixed versions available...
RUSTSEC-2026-0305 Use-after-free when XML includes have duplicated entities
Librsvg uses libxml2, a C library, to parse XML. When librsvg parses an SVG document which has a nested Xinclude, an XML entity declaration with a duplicate name as an existing one can cause a use-after-free error. While libxml2 is expanding an internal entity, a recursive XInclude can parse...
RUSTSEC-2026-0307 `uncbv`: archive extraction is vulnerable to path traversal (zip-slip)
Summary uncbv extract writes each archive entry to outputdir.joinentryfilename using the filename stored in the archive with no check for .. components or absolute paths. A malicious .cbv / .cbz archive whose entry name contains ../ or an absolute path can therefore cause files to be written...
CGA-929F-MV84-H64W
Bulletin has no description...
CGA-X2W3-H4G7-53J8
Bulletin has no description...
ROOT-APP-MAVEN-CVE-2023-2976 CVE-2023-2976 in com.google.guava:guava - Patched by Root
Root has patched CVE-2023-2976 in the com.google.guava:guava package for Root:Maven. Multiple fixed versions available...
OPENSUSE-SU-2026:21953-1 Security update for python-asyncssh
This update for python-asyncssh fixes the following issues: Changes in python-asyncssh: - CVE-2026-62949: denial of service via infinite loop when processing zero-sized SSH packets bsc1280972...
CGA-GHCF-3XPM-GPRR
Bulletin has no description...
OPENSUSE-SU-2026:21935-1 Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issue: - CVE-2025-55154: integer overflow when performing magnified size calculations in ReadOneMNGIMage can lead to out-of- bounds write bsc1248078...
CLSA-2026-1790164156 TuxCare security update for ws (2 CVEs)
TuxCare rebuilt ws to address 2 CVEs. Fixed in 6.2.2-tuxcare.1...
CLSA-2026-1790164081 TuxCare security update for ws (2 CVEs)
TuxCare rebuilt ws to address 2 CVEs. Fixed in 8.5.0-tuxcare.1...
SUSE-SU-2026:4302-1 Security update for perl-Authen-SASL
This update for perl-Authen-SASL fixes the following issue: - CVE-2026-86219: replayed authentication responses accepted due to unverified nonce in serverstep bsc1279806...
OPENSUSE-SU-2026:21954-1 Security update for osmo-iuh
This update for osmo-iuh fixes the following issues: Changes in osmo-iuh: - CVE-2026-75894: iuclient: reject oversized RANAP NAS-PDU boo1281607...
ECHO-B652-472D-4B8D
Bulletin has no description...
ECHO-AC54-A599-3035
Bulletin has no description...
ECHO-60E6-3169-A982
Bulletin has no description...
ECHO-2D66-2137-D02B
Bulletin has no description...
ECHO-8095-238B-F99C
Bulletin has no description...
CLSA-2026-1790162728 TuxCare security update for 14 packages (1 CVE)
TuxCare rebuilt 14 packages to address 1 CVE. Fixed in 3.2.4-tuxcare.3...
CLSA-2026-1790162696 TuxCare security update for adm-zip (1 CVE)
TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.16-tuxcare.1...
CLSA-2026-1790162622 TuxCare security update for adm-zip (1 CVE)
TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.18-tuxcare.2...
ECHO-9D8D-CA96-2A24
Bulletin has no description...
ECHO-236C-B61F-5EA8
Bulletin has no description...
ECHO-6537-8113-045B
Bulletin has no description...
AZL-103532 CVE-2026-96442 affecting package emacs 29.4-6
A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code...
DEBIAN-CVE-2026-96442
A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code...
ECHO-1881-2D0C-4CA8
Bulletin has no description...
ECHO-AF68-FD52-523E
Bulletin has no description...
ECHO-F2BE-C572-8D2E
Bulletin has no description...
ECHO-42DA-64D6-7C43
Bulletin has no description...
ECHO-308F-AC4D-9922
Bulletin has no description...
ECHO-4CB3-34B4-E3BE
Bulletin has no description...
ECHO-1E4A-9418-D564
Bulletin has no description...
ECHO-3BFE-AB50-6B19
Bulletin has no description...
ECHO-4ECE-72F9-E967
Bulletin has no description...
ECHO-EDEC-421F-5608
Bulletin has no description...
ECHO-EFC3-A78B-26BF
Bulletin has no description...
ECHO-9245-2E93-FFBA
Bulletin has no description...
ECHO-902D-B92B-E26C
Bulletin has no description...