[SECURITY] Fedora 44 Update: perl-PAR-Packer-1.064-6.fc44

This module implements the App::Packer::Backend interface, for generating stand-alone executables, perl scripts and PAR files...

SUSE CVE-2026-54787

sigstore-go is a Go library for Sigstore signing and verification. Prior to 1.2.1, sigstore-go does not check a bundle signing timestamp against the validity window of an ExpiringKey wrapping a self-managed long-lived signing key without a certificate, which can allow an attacker holding expired...

resource-agents security update

4.9.0-54.36 - bundled urllib3: fix CVE-2026-44431 Resolves: RHEL-178598...

CVE-2026-67869

Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the ServiceCall validates input arguments against runtime-resolved InputArguments metadata...

CVE-2026-67864

An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via the NodeManagement type-instantiation logic component...

osbuild-composer security update

175-1.0.1 - Track github upstream...

CVE-2026-67863

In open62541 1.5.5, a server-side use-after-free exists in the local MonitoredItem callback path. The issue occurs when UASubscriptionlocalPublish continues to use the current UANotification after a callback invokes UAServerdeleteMonitoredItem for the current local MonitoredItem. This allows a...

freerdp security update

2:3.10.3-12.7 - Add codecID checks for CACHEBITMAPV3ORDER CVE-2026-55827 - Fix boundary checks in gdiBitmapDecompress CVE-2026-55827 Resolves: RHEL-194327...

httplib2: httplib2: Denial of Service via unbounded decompression of HTTP response bodies

A flaw was found in httplib2, a Python HTTP client library. This vulnerability allows a malicious or compromised HTTP server to send a small compressed data payload that, when decompressed by httplib2, expands to an extremely large size in memory. This unbounded decompression can lead to a Denial...

CVE-2026-54272 vulnerabilities

Vulnerabilities for packages: graalvm, wazuh-dashboard-fips, langfuse-fips, kubeflow-pipelines, lerna, wazuh-dashboard, unleash, actions-runner, sqlpad, opensearch-dashboards, prism, librechat, pulumi, opensearch-dashboards-fips, unleash-proxy, code-server, kibana, unleash-fips, langfuse, npm,...

CVE-2026-69192 vulnerabilities

Vulnerabilities for packages: graalvm, wazuh-dashboard-fips, langfuse-fips, kubeflow-pipelines, lerna, wazuh-dashboard, unleash, actions-runner, sqlpad, opensearch-dashboards, prism, librechat, pulumi, opensearch-dashboards-fips, unleash-proxy, code-server, kibana, unleash-fips, langfuse, npm,...

CVE-2026-69198 vulnerabilities

Vulnerabilities for packages: graalvm, wazuh-dashboard-fips, langfuse-fips, kubeflow-pipelines, lerna, wazuh-dashboard, unleash, actions-runner, sqlpad, opensearch-dashboards, prism, librechat, pulumi, opensearch-dashboards-fips, unleash-proxy, code-server, kibana, unleash-fips, langfuse, npm,...

GHSA-22JQ-VG5J-6VGG vulnerabilities

Vulnerabilities for packages: graalvm, wazuh-dashboard-fips, langfuse-fips, kubeflow-pipelines, lerna, wazuh-dashboard, unleash, actions-runner, sqlpad, opensearch-dashboards, prism, librechat, pulumi, opensearch-dashboards-fips, unleash-proxy, code-server, kibana, unleash-fips, langfuse, npm,...

GHSA-4XRF-JV44-H6HH vulnerabilities

Vulnerabilities for packages: graalvm, wazuh-dashboard-fips, langfuse-fips, kubeflow-pipelines, lerna, wazuh-dashboard, unleash, actions-runner, sqlpad, opensearch-dashboards, prism, librechat, pulumi, opensearch-dashboards-fips, unleash-proxy, code-server, kibana, unleash-fips, langfuse, npm,...

GHSA-MWP4-54F8-5FHR vulnerabilities

Vulnerabilities for packages: graalvm, wazuh-dashboard-fips, langfuse-fips, kubeflow-pipelines, lerna, wazuh-dashboard, unleash, actions-runner, sqlpad, opensearch-dashboards, prism, librechat, pulumi, opensearch-dashboards-fips, unleash-proxy, code-server, kibana, unleash-fips, langfuse, npm,...

CVE-2026-14643 vulnerabilities

Vulnerabilities for packages: code-server, langfuse-fips, kibana, pelias-api, vitess, langfuse, renovate...

GHSA-JR45-8VMC-QM54 vulnerabilities

Vulnerabilities for packages: code-server, langfuse-fips, kibana, pelias-api, vitess, langfuse, renovate...

CVE-2026-18446 vulnerabilities

Vulnerabilities for packages: prism, serve, yaml-language-server, unleash-proxy, nextcloud-server, argo-workflows, arangodb, langfuse-fips, vitess, gemini-cli, librechat, opensearch-dashboards-fips, langfuse, saf, opensearch-dashboards, renovate...

GHSA-2P49-HGCM-8545 vulnerabilities

Vulnerabilities for packages: arangodb...

GHSA-RGW5-RVV9-X895 vulnerabilities

Vulnerabilities for packages: graalvm, wazuh-dashboard-fips, argo-workflows, langfuse-fips, pelias-api, vitess, dotstatsuite-supercore, wazuh-dashboard, actions-runner, unleash, opensearch-dashboards, sqlpad, prism, gitlab-rails-ce-fips, serve, azurite, arangodb, pulumi, ts-patch,...