CVE-2026-8384 vulnerabilities

Vulnerabilities for packages: akhq, trino, solr, strimzi-kafka-operator, neo4j, dependency-track, druid, confluent-kafka...

GHSA-F4V5-65JJ-PCR2 vulnerabilities

Vulnerabilities for packages: akhq, solr, strimzi-kafka-operator, neo4j, dependency-track, druid, confluent-kafka...

GHSA-MFG7-5GFP-C4W3 vulnerabilities

Vulnerabilities for packages: tez, akhq, apache-pulsar, management-api-for-apache-cassandra-5.0, strimzi-kafka-operator, apache-nifi, opensearch, thingsboard, zipkin, druid, keycloak, spark, celeborn, apicurio-registry...

Updated memcached packages fix security and other issues

The updated packages fix bugs including security ones...

CVE-2026-16461 affecting package rpcbind for versions less than 1.2.9-1

CVE-2026-16461 affecting package rpcbind for versions less than 1.2.9-1. An upgraded version of the package is available that resolves this issue...

Linux Distros Unpatched Vulnerability : CVE-2026-48586

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Handling of Highly Compressed Data Data Amplification vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings. This issue affects Apac...

rest security update

0.9.1-11.1 - Add patch for CVE-2026-16615 Weak random number generation in PKCE implementation Resolves: RHEL-213749...

libXfont2 security update

2.0.3-12.1 - CVE fix for: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003 Resolves: https://redhat.atlassian.net/browse/RHEL-191886 Resolves: https://redhat.atlassian.net/browse/RHEL-191933 Resolves: https://redhat.atlassian.net/browse/RHEL-191938...

libXfont2 security update

2.0.3-2.1 - CVE fix for: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003 Resolves: https://redhat.atlassian.net/browse/RHEL-191877 Resolves: https://redhat.atlassian.net/browse/RHEL-191928 Resolves: https://redhat.atlassian.net/browse/RHEL-191948...

ROS-20260728-73-0003

The vulnerability in ImageMagick 7 is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow an attacker to cause a service failure...

yelp security update

2:3.28.1-3.2 - Fix CVE-2026-13601 RHEL-190226...

compat-libtiff3 security update

3.9.4-16 - fix CVE-2026-12912: heap-buffer-overflow in PixarLog ABGR decoding RHEL-189375...

libreswan: badly formatted X.509 certificate can cause an assertion failure that crashes the daemon process

A flaw was found in Libreswan. An unauthenticated remote attacker can send a specially crafted X.509 certificate payload during an IKEv1 or IKEv2 exchange. This flaw occurs when Libreswan is operating in FIPS Federal Information Processing Standards mode and processing a certificate with an inval...

thrift: org.apache.thrift/libthrift: github.com/apache/thrift: Apache Thrift: Denial of Service via improper handling of highly compressed data

A flaw was found in Apache Thrift. This vulnerability, categorized as improper handling of highly compressed data also known as data amplification, allows a remote attacker to cause a Denial of Service DoS by sending specially crafted, highly compressed data. The affected component fails to...

Updated nginx packages fix security vulnerabilities

CVE-2026-42533: Heap buffer overflow might occur in a worker process when using the map directive with regex matching if the map variable was included in a string expression after a capture affected by this map; a similar issue might happen when using a non-cacheable variable in a string...

CVE-2026-56816 vulnerabilities

Vulnerabilities for packages: spark-fips, opensearch-fips, apache-hop-fips, apache-hop, strimzi-kafka-operator, strimzi-kafka-operator-fips, camunda-zeebe, camunda, spark, opensearch...

GHSA-HPCC-26XQ-25FV vulnerabilities

Vulnerabilities for packages: spark-fips, opensearch-fips, apache-hop-fips, apache-hop, strimzi-kafka-operator, strimzi-kafka-operator-fips, camunda-zeebe, camunda, spark, opensearch...

CVE-2026-13676 vulnerabilities

Vulnerabilities for packages: nextcloud-server, prism, kibana, opensearch-dashboards-fips, gitlab-rails-ce-fips, opensearch-dashboards, keep, arangodb, wazuh-dashboard-fips, wazuh-dashboard, yaml-language-server, unleash-proxy, keep-fips, gitlab-rails-ce, vitess...

CVE-2026-59887 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce, kibana...

GHSA-4C8G-83QW-93J6 vulnerabilities

Vulnerabilities for packages: nextcloud-server, prism, kibana, opensearch-dashboards-fips, gitlab-rails-ce-fips, opensearch-dashboards, keep, arangodb, wazuh-dashboard-fips, wazuh-dashboard, yaml-language-server, unleash-proxy, keep-fips, gitlab-rails-ce, vitess...