1009768 matches found
ECHO-D825-D451-60E0
Bulletin has no description...
CLSA-2026-1787146516 TuxCare security update for mlflow (1 CVE)
TuxCare rebuilt mlflow to address 1 CVE. Fixed in 2.22.4.post7+tuxcare...
ROOT-APP-PYPI-CVE-2026-39892 CVE-2026-39892 in cryptography - Patched by Root
Root has patched CVE-2026-39892 in the cryptography package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-537C-GMF6-5CCF GHSA-537c-gmf6-5ccf in cryptography - Patched by Root
Root has patched GHSA-537c-gmf6-5ccf in the cryptography package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-69249 CVE-2026-69249 in cryptography - Patched by Root
Root has patched CVE-2026-69249 in the cryptography package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-69247 CVE-2026-69247 in cryptography - Patched by Root
Root has patched CVE-2026-69247 in the cryptography package for Root:PyPI. Multiple fixed versions available...
JLSEC-2026-1345 GNU Bison allows for an execution of an arbitrary program during HTML report generation due to...
GNU Bison allows for an execution of an arbitrary program during HTML report generation due to improper handling of grammar-defined configuration variables. A grammar file can override the executable used for the XML‑to‑HTML transformation step via %define tool.xsltproc, which is accepted without...
JLSEC-2026-1346 GNU Bison improperly handles grammar‑defined output paths. Grammar directives such as %output and...
GNU Bison improperly handles grammar‑defined output paths. Grammar directives such as %output and %header allow specifying file paths, which are accepted without restriction and override caller‑supplied output options. When processing attacker-supplied grammar, this behavior allows directing...
CVE-2026-65612 Shell Command Injection in nnn
nnn does not sanitize the filename variable. An attacker can place a file with a crafted name on a shared filesystem, removable media, or inside an extracted archive whose name contains a single quote followed by shell syntax. If the victim navigates to that file and opens it with preview-tabbed,...
CVE-2026-65611 Shell Command Injection in nnn
nnn does not sanitize the path variable. An attacker can create a directory on a shared filesystem, removable media, or inside an extracted archive whose name contains a single quote followed by shell syntax. If the victim enters that directory in nnn and uses the batch copy or move workflow, the...
CVE-2026-65610 Numeric Truncation Error in nnn
nnn stores homelen variable as uchart, which can only represent values in the range 0-255. An attacker who can influence the victim's execution environment can provide an arbitrary HOME path with length that is truncated to 0. The expression homelen - 1 is promoted to signed int and becomes -1 an...
CVE-2026-65609 Out-of-bounds write in nnn
nnn is vulnerable to Out-of-Bound write vulnerability. Due to lack of validation of attacker-controlled length fields deserialized from a session file, a crafted session file can cause nnn to write data beyond the bounds of fixed-size global buffers when loaded with the -s option. An attacker who...
DEBIAN-CVE-2026-76235
Bulletin has no description...
CLSA-2026-1787145440 TuxCare security update for org.springframework.security (4 CVEs)
TuxCare rebuilt 19 org.springframework.security packages to address 4 CVEs. Fixed in 6.2.8-tuxcare.3...
CLSA-2026-1787145403 TuxCare security update for org.springframework.data (1 CVE)
TuxCare rebuilt 3 org.springframework.data packages to address 1 CVE. Fixed in 4.4.13-tuxcare.1...
CLSA-2026-1787145317 TuxCare security update for org.springframework.data (4 CVEs)
TuxCare rebuilt 4 org.springframework.data packages to address 4 CVEs. Fixed in 3.4.13-tuxcare.1...
ROOT-APP-NPM-CVE-2025-7783 CVE-2025-7783 in form-data - Patched by Root
Root has patched CVE-2025-7783 in the form-data package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-9277 CVE-2026-9277 in shell-quote - Patched by Root
Root has patched CVE-2026-9277 in the shell-quote package for Root:npm. Multiple fixed versions available...
CLSA-2026-1787144963 TuxCare security update for org.springframework.data (4 CVEs)
TuxCare rebuilt 5 org.springframework.data packages to address 4 CVEs. Fixed in 3.4.13-tuxcare.1...
CLSA-2026-1787144764 TuxCare security update for org.springframework.data (1 CVE)
TuxCare rebuilt 5 org.springframework.data packages to address 1 CVE. Fixed in 4.4.13-tuxcare.1...
CLSA-2026-1787144370 TuxCare security update for org.springframework.data:spring-data-ldap (4 CVEs)
TuxCare rebuilt org.springframework.data:spring-data-ldap to address 4 CVEs. Fixed in 3.4.13-tuxcare.1...
ROOT-OS-UBUNTU-2404-CVE-2026-27456 CVE-2026-27456 in util-linux - Patched by Root
Root has patched CVE-2026-27456 in the util-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-68972 CVE-2025-68972 in gnupg2 - Patched by Root
Root has patched CVE-2025-68972 in the gnupg2 package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-24882 CVE-2026-24882 in gnupg2 - Patched by Root
Root has patched CVE-2026-24882 in the gnupg2 package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2024-29018 CVE-2024-29018 in docker.io - Patched by Root
Root has patched CVE-2024-29018 in the docker.io package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2024-36623 CVE-2024-36623 in docker.io - Patched by Root
Root has patched CVE-2024-36623 in the docker.io package for Root:Debian:12. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2024-37890 CVE-2024-37890 in ws - Patched by Root
Root has patched CVE-2024-37890 in the ws package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-48779 CVE-2026-48779 in ws - Patched by Root
Root has patched CVE-2026-48779 in the ws package for Root:npm. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-41066 CVE-2026-41066 in lxml - Patched by Root
Root has patched CVE-2026-41066 in the lxml package for Root:PyPI. Multiple fixed versions available...
ROOT-OS-UBUNTU-2510-CVE-0000-0000 CVE-0000-0000 in bash - Patched by Root
Root has patched CVE-0000-0000 in the bash package for Root:Ubuntu:25.10. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-24880 CVE-2026-24880 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root
Root has patched CVE-2026-24880 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-43515 CVE-2026-43515 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root
Root has patched CVE-2026-43515 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-24734 CVE-2026-24734 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root
Root has patched CVE-2026-24734 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-43512 CVE-2026-43512 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root
Root has patched CVE-2026-43512 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-41293 CVE-2026-41293 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root
Root has patched CVE-2026-41293 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...
USN-8649-1 libheif vulnerabilities
It was discovered that libheif had an integer underflow in the Fraction constructor when a clap transform was applied twice. An attacker could possibly use this issue to cause libheif to crash, resulting in a denial of service. CVE-2026-62289 It was discovered that libheif had an out-of-bounds re...
ROOT-OS-DEBIAN-13-CVE-2026-33164 CVE-2026-33164 in libde265 - Patched by Root
Root has patched CVE-2026-33164 in the libde265 package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-49337 CVE-2026-49337 in libde265 - Patched by Root
Root has patched CVE-2026-49337 in the libde265 package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-33165 CVE-2026-33165 in libde265 - Patched by Root
Root has patched CVE-2026-33165 in the libde265 package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-49346 CVE-2026-49346 in libde265 - Patched by Root
Root has patched CVE-2026-49346 in the libde265 package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-49295 CVE-2026-49295 in libde265 - Patched by Root
Root has patched CVE-2026-49295 in the libde265 package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-61147 CVE-2025-61147 in libde265 - Patched by Root
Root has patched CVE-2025-61147 in the libde265 package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-42250 CVE-2026-42250 in bzip2 - Patched by Root
Root has patched CVE-2026-42250 in the bzip2 package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-58050 CVE-2026-58050 in libssh2 - Patched by Root
Root has patched CVE-2026-58050 in the libssh2 package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-66032 CVE-2026-66032 in libssh2 - Patched by Root
Root has patched CVE-2026-66032 in the libssh2 package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-58051 CVE-2026-58051 in libssh2 - Patched by Root
Root has patched CVE-2026-58051 in the libssh2 package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-7598 CVE-2026-7598 in libssh2 - Patched by Root
Root has patched CVE-2026-7598 in the libssh2 package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-15661 CVE-2025-15661 in libssh2 - Patched by Root
Root has patched CVE-2025-15661 in the libssh2 package for Root:Debian:12. Multiple fixed versions available...