CLSA-2026-1789152222 TuxCare security update for dompurify (2 CVEs)

TuxCare rebuilt dompurify to address 2 CVEs. Fixed in 2.3.0-tuxcare.5...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.73 bug fix and security update

Red Hat OpenShift Container Platform release 4.14.73 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...

CLSA-2026-1789150088 TuxCare security update for org.springframework.graphql (6 CVEs)

TuxCare rebuilt 2 org.springframework.graphql packages to address 6 CVEs. Fixed in 1.3.7-tuxcare.4...

MGASA-2026-0391 Updated glibc package fixes security vulnerabilities

Potential buffer overflow in nssprintrrf TSIG handling path. CVE-2026-5435 Buffer overread in nsprintrrf with corrupted RDATA field. CVE-2026-6238 wordexp with WRDEAPPEND can return or use invalid memory. CVE-2026-6368 Potential stack-based buffer clash during tilde expansion in wordexp...

CLSA-2026-1789146735 TuxCare security update for dompurify (1 CVE)

TuxCare rebuilt dompurify to address 1 CVE. Fixed in 3.2.3-tuxcare.4...

CLSA-2026-1789146579 TuxCare security update for dompurify (1 CVE)

TuxCare rebuilt dompurify to address 1 CVE. Fixed in 3.1.6-tuxcare.8...

CLSA-2026-1789146534 TuxCare security update for org.springframework.ldap:spring-ldap-core (1 CVE)

TuxCare rebuilt org.springframework.ldap:spring-ldap-core to address 1 CVE. Fixed in 2.4.1-tuxcare.2...

CLSA-2026-1789146166 TuxCare security update for io.netty (1 CVE)

TuxCare rebuilt 47 io.netty packages to address 1 CVE. Fixed in 4.1.119.Final-tuxcare.2...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nodejs26: nodejs26-26.8.2-0.1.hum1 aarch64, x8664 nodejs26-bin-26.8.2-0.1.hum1 noarch nodejs26-devel-26.8.2-0.1.hum1 aarch64, x8664 nodejs26-docs-26.8.2-0.1.hum1 noarch...

CLSA-2026-1789139223 TuxCare security update for dompurify (3 CVEs)

TuxCare rebuilt dompurify to address 3 CVEs. Fixed in 3.2.7-tuxcare.2...

RLSA-2026:66355 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net: bridge: stop fast-leave after deleting a port group CVE-2026-74480 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...

RLSA-2026:66542 Important: nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 For more details about the security issues, including the impac...

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

CVE-2026-89252

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authorization vulnerability in addLiveLink.php when updating LiveLinks. The component fails to verify ownership, allowing any authenticated canStream user to overwrite another user's LiveLink HLS source and metadata...

CVE-2026-89252 AVideo Missing Authorization in addLiveLink.php LiveLink Update

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to verify ownership in addLiveLink.php when updating LiveLinks, allowing authenticated users to modify other users' links. A canStream user can overwrite another user's LiveLink HLS source and metadata by supplying an existing...

CLSA-2026-1789123062 TuxCare security update for flask-cors (3 CVEs)

TuxCare rebuilt flask-cors to address 3 CVEs. Fixed in 5.0.1.post1+tuxcare...

ROOT-OS-DEBIAN-12-CVE-2026-32814 CVE-2026-32814 in libheif - Patched by Root

Root has patched CVE-2026-32814 in the libheif package for Root:Debian:12. Multiple fixed versions available...

CLSA-2026-1789122433 TuxCare security update for django (4 CVEs)

TuxCare rebuilt django to address 4 CVEs. Fixed in 4.0.post18+tuxcare...

Minor update (2) for Vivaldi Desktop 8.2

Download Vivaldi The following improvements were made since the first 8.2 minor update: Calculator Precision rounding VB-131340 CalendarSecurity Incorrect sanitization of calendar display VB-130990 Chromium Update to 152.0.7977.124 ESR includes security fixes from 153.0.8010.36/37, such as...

Important: Red Hat Security Advisory: grafana-pcp security update

An update for grafana-pcp is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...