08.05.2026 08:30 Starman versions before 0.4018 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starman incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when both headers are present in an HTTP request. Per RFC 7230 3.3.3, Transfer-Encoding must take precedence. An attacker could exploit this to smuggle malicious HTTP requests via a front-end reverse
08.05.2026 08:30 Validate RSA_public_encrypt result in RSASVE
08.05.2026 08:30 Starman versions before 0.4018 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starman incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when both headers are present in an HTTP request. Per RFC 7230 3.3.3, Transfer-Encoding must take precedence. An attacker could exploit this to smuggle malicious HTTP requests via a front-end reverse
08.05.2026 08:30 Starman versions before 0.4018 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starman incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when both headers are present in an HTTP request. Per RFC 7230 3.3.3, Transfer-Encoding must take precedence. An attacker could exploit this to smuggle malicious HTTP requests via a front-end reverse
08.05.2026 08:30 PostfixAdmin could be made to run malicious JavaScript in the user's browser if it received specially crafted input.
08.05.2026 08:30 CiviCRM could be made to run malicious JavaScript in the user's browser if it received specially crafted input.
08.05.2026 02:15 Dun Anh Nguyen discovered a buffer overflow in LibreOffice, which could result in an out-of-bounds write if OOXML documents with malformed encryption parameters are opened. For the oldstable distribution , this problem has been fixed in version 4:7.4.7-1+deb12u11.
08.05.2026 02:15 HtmlUnit could be made to run programs as your login if it opened a malicious website.
08.05.2026 02:15 Several security issues were fixed in the Linux kernel.
08.05.2026 02:15 Several security issues were fixed in the Linux kernel.
08.05.2026 02:15 An update that solves one vulnerability can now be installed.
08.05.2026 02:15 An update that solves 6 vulnerabilities can now be installed.
07.05.2026 19:45 Important: thunderbird security update
07.05.2026 19:45 Important: fence-agents security update
07.05.2026 19:45 Important: fence-agents security update
