177841 matches found
PackageKit security update
1.2.8-8.0.1 - remove RHEL vendor patch PackageKit-0.3.8-RHEL-Vendor.conf.patch...
yggdrasil-worker-package-manager security update
0.2.3-7 - Bump release for rebuild 0.2.3-6 - Bump release for rebuild...
Linux Distros Unpatched Vulnerability : CVE-2026-47423
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. In 3.4.4, DOMPurify allowed selectedcontent by default, allowing browsers to...
ROS-20260716-73-0044
The vulnerability in Vim is related to incorrect elimination of separators. Exploiting this vulnerability can allow an attacker to gain access to modify the system’s configuration...
mariadb10.11 security, bug fix, and enhancement update
3:10.11.18-1 - Rebase to 10.11.18 3:10.11.17-1 - Rebase to 10.11.17 3:10.11.16-1 - Rebase to 10.11.16...
rrdtool security update
1.8.0-21 - Fixed stack buffer overflow in rrdcached and added more security checks Resolves: RHEL-173264...
python3.12 security update
3.12.13-3.0.1.el98.1 - Remove upstream URL reference 3.12.13-3.1 - Security fix for CVE-2026-15308 Resolves: RHEL-RHEL-193793...
php security update
8.3.31-1 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode...
flatpak security update
1.16.0-9.1 - Fix arbitrary code execution via crafted symlinks in sandbox-expose options Resolves: RHEL-165630 - Fix arbitrary file deletion on host via improper cache file path validation Resolves: RHEL-170157...
libexpat: libexpat: Arbitrary Code Execution via integer overflow in addBinding
A flaw was found in libexpat. This vulnerability, an integer overflow in the addBinding function, could allow a local attacker to execute arbitrary code. By exploiting this, an attacker could gain control over the affected system, compromising its confidentiality and integrity...
CVE-2026-38974
Dulwich through 1.1.0 was found to be missing SSH host key verification in contrib/paramikovendor.py...
CVE-2026-38754
A heap overflow in the ifsbreakup function shell/ash.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted input...
CVE-2026-54448 vulnerabilities
Vulnerabilities for packages: trivy-operator...
GHSA-Q3FV-X8VG-QQM4 vulnerabilities
Vulnerabilities for packages: trivy-operator...
CVE-2022-32190 vulnerabilities
Vulnerabilities for packages: kubeflow-katib...
CVE-2022-41715 vulnerabilities
Vulnerabilities for packages: kubeflow-katib...
CVE-2023-26136 vulnerabilities
Vulnerabilities for packages: kubeflow-katib...
CVE-2022-2879 vulnerabilities
Vulnerabilities for packages: kubeflow-katib...