[SECURITY] Fedora 44 Update: bluez-5.87-4.fc44

Utilities for use in Bluetooth applications: - avinfo - bluemoon - bluetoothctl - bluetoothd - btattach - btmon - hex2hcd - mpris-proxy The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A...

[SECURITY] Fedora 43 Update: ceph-19.2.6-1.fc43

Ceph is a massively scalable, open-source, distributed storage system that ru ns on commodity hardware and delivers object, block and file system storage...

[SECURITY] Fedora 43 Update: calibre-9.13.0-1.fc43

Calibre is meant to be a complete e-library solution. It includes library management, format conversion, news feeds to ebook conversion as well as e-book reader sync features. Calibre is primarily a ebook cataloging program. It manages your ebook collection for you. It is designed around the...

[SECURITY] Fedora 43 Update: pack-0.40.9-1.fc43

pack is a CLI implementation of the Platform Interface Specification for Cloud Native Buildpacks...

Fedora 45 : gum (2026-6e4f15e36b)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6e4f15e36b advisory. Automatic update for gum-2.0.0-1.fc45. Changelog Fri Aug 21 2026 Carl George - 2.0.0-1 - Update to version 2.0.0 rhbz2495240 - Override bundled...

OPENSUSE-SU-2026:11578-1 trivy-0.74.0-1.1 on GA media

These are all security issues fixed in the trivy-0.74.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11576-1 libsoup-2_4-1-2.74.3-22.1 on GA media

These are all security issues fixed in the libsoup-24-1-2.74.3-22.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11579-1 libwireshark19-4.6.8-2.1 on GA media

These are all security issues fixed in the libwireshark19-4.6.8-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11577-1 python313-eventlet-0.41.2-1.1 on GA media

These are all security issues fixed in the python313-eventlet-0.41.2-1.1 package on the GA media of openSUSE Tumbleweed...

CLSA-2026-1787333890 TuxCare security update for io.netty (61 CVEs)

TuxCare rebuilt 47 io.netty packages to address 61 CVEs. Fixed in 4.1.108.Final-tuxcare.1...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.12: python3.12-3.12.14-1.hum1 aarch64, x8664 python3.12-debug-3.12.14-1.hum1 aarch64, x8664 python3.12-devel-3.12.14-1.hum1 aarch64, x8664 python3.12-idle-3.12.14-1.hum1 aarch64, x8664...

CLSA-2026-1787331164 TuxCare security update for io.netty (48 CVEs)

TuxCare rebuilt 47 io.netty packages to address 48 CVEs. Fixed in 4.1.117.Final-tuxcare.3...

CLSA-2026-1787326456 TuxCare security update for org.apache.commons:commons-compress (1 CVE)

TuxCare rebuilt org.apache.commons:commons-compress to address 1 CVE. Fixed in 1.25.0-tuxcare.1...

CLSA-2026-1787326082 TuxCare security update for io.micronaut (4 CVEs)

TuxCare rebuilt 36 io.micronaut packages to address 4 CVEs. Fixed in 3.8.5-tuxcare.1...

CVE-2026-62313

Incus is a system container and virtual machine manager. Prior to version 7.3.0, project-level enforcement of restricted.containers.privilege=isolated can be trivially bypassed, allowing a user to create a non-isolated shared host idmap container in a project that is configured to forbid them. Th...

CVE-2026-62941

Incus is a system container and virtual machine manager. Prior to version 7.3.0, when copying an instance across projects, the project restriction check AllowInstanceCreation runs BEFORE the source instance's configuration is merged into the request. Dangerous configuration keys including...

CVE-2026-48750

Incus is a system container and virtual machine manager. Prior to version 7.2.0, the record-output parameter of the /instances/$name/exec endpoint stores the output of the command in the exec-output directory of the instance. If exec-output is a symlink, file named execUUID.stdout and...

UBUNTU-CVE-2026-62313

Incus is a system container and virtual machine manager. Prior to version 7.3.0, project-level enforcement of restricted.containers.privilege=isolated can be trivially bypassed, allowing a user to create a non-isolated shared host idmap container in a project that is configured to forbid them. Th...

CVE-2026-55621

Incus is a system container and virtual machine manager. Prior to version 7.2.0, missing authorization checks exist for custom volume copying where an attacker knowing the name of a project that they don't have access to and the name of a custom volume in that project can copy the custom volume t...

CVE-2026-55622

Incus is a system container and virtual machine manager. Prior to version 7.2.0, missing authorization checks exist for instance copying where an attacker knowing the name of a project that they don't have access to and the name of an instance in that project can copy the instance to a new projec...