[SECURITY] [DLA 4777-1] linux security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4777-1 [email protected] https://www.debian.org/lts/security/ Salvatore Bonaccorso September 08, 2026 https://wiki.debian.org/LTS -...

Important: Red Hat Security Advisory: Red Hat build of OpenTelemetry 3.11.0 release

Red Hat build of OpenTelemetry 3.11.0 has been released This release of the Red Hat build of OpenTelemetry provides new features, security improvements, and bug fixes. Breaking changes: With this update, the addmetricsuffixes field of the Prometheus Exporter configuration in the...

CVE-2026-79576

creationtimestamp| type| source ---|---|--- 2026-09-08 16:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muzghqtpgw2j 2026-09-08 18:08:04+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muzmiuejgl2g 2026-09-08 18:08:34+00:00| seen|...

CVE-2026-84732

creationtimestamp| type| source ---|---|--- 2026-09-08 16:15:19+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/openvpn-security-advisory-av26-889...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana13.2: grafana13.2-13.2.1-0.2.hum1 aarch64, x8664 grafana13.2-13.2.1-0.2.hum1.src src Security Fixes: grafana13.2: CVE-2026-84394 CVE-2026-84292...

fast-uri: fast-uri: Host confusion via unbalanced URI brackets can bypass security policies

A flaw was found in fast-uri. The library incorrectly processes Uniform Resource Identifier URI hosts containing unbalanced brackets, leading to a discrepancy in how the host is parsed by fast-uri compared to other HTTP clients. This host confusion can allow an attacker to bypass security policie...

CVE-2026-61516

creationtimestamp| type| source ---|---|--- 2026-09-08 16:08:38+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muzftcxy2t2j 2026-09-08 19:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muzs7cf6yg2p...

OPENSUSE-SU-2026:21810-1 Security update for tomcat10

This update for tomcat10 fixes the following issues: - CVE-2026-65182: Bypass longest prefix security constraint bsc1276893. - CVE-2026-65183: TOCTOU when setting specific permissions for Unix Domain Sockets bsc1276894. - CVE-2026-65637: HTTP/2 no-authority bypass of strict SNI validation - fix...

CLSA-2026-1788881357 TuxCare security update for org.thymeleaf:thymeleaf (1 CVE)

TuxCare rebuilt org.thymeleaf:thymeleaf to address 1 CVE. Fixed in 3.1.3.RELEASE-tuxcare.2...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.12: python3.12-3.12.14-1.1.hum1 aarch64, x8664 python3.12-debug-3.12.14-1.1.hum1 aarch64, x8664 python3.12-devel-3.12.14-1.1.hum1 aarch64, x8664 python3.12-idle-3.12.14-1.1.hum1 aarch64,...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.11: python3.11-3.11.16-1.2.hum1 aarch64, x8664 python3.11-debug-3.11.16-1.2.hum1 aarch64, x8664 python3.11-devel-3.11.16-1.2.hum1 aarch64, x8664 python3.11-idle-3.11.16-1.2.hum1 aarch64,...

Important: Red Hat Security Advisory: Red Hat Quay 3.9.26

Red Hat Quay 3.9.26 is now available with bug fixes. Quay 3.9.26...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.10: python3.10-3.10.21-1.1.hum1 aarch64, x8664 python3.10-debug-3.10.21-1.1.hum1 aarch64, x8664 python3.10-devel-3.10.21-1.1.hum1 aarch64, x8664 python3.10-idle-3.10.21-1.1.hum1 aarch64,...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.14: python-unversioned-command-3.14.7-1.1.hum1 noarch python3-3.14.7-1.1.hum1 aarch64, x8664 python3-debug-3.14.7-1.1.hum1 aarch64, x8664 python3-devel-3.14.7-1.1.hum1 aarch64, x8664...

CLSA-2026-1788878815 TuxCare security update for 90 packages (2 CVEs)

TuxCare rebuilt 90 packages to address 2 CVEs. Fixed in 9.4.50.v20221201-tuxcare.5...

USN-8736-1 perl vulnerabilities

It was discovered that Perl incorrectly handled certain large inputs during regular expression matching. An attacker could possibly use this issue to trigger out-of-bounds heap reads or writes, resulting in a denial of service or arbitrary code execution. CVE-2026-15534 It was discovered that Per...

USN-8736-1: Perl vulnerabilities

It was discovered that Perl incorrectly handled certain large inputs during regular expression matching. An attacker could possibly use this issue to trigger out-of-bounds heap reads or writes, resulting in a denial of service or arbitrary code execution. CVE-2026-15534 It was discovered that Per...

CLSA-2026-1788876797 TuxCare security update for org.springframework (2 CVEs)

TuxCare rebuilt 25 org.springframework packages to address 2 CVEs. Fixed in 6.1.15-tuxcare.5...

firefox: thunderbird: Internally found bugs fixed in Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another...

firefox: thunderbird: Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another...