EUVD-2026-76481

In the Linux kernel, the following vulnerability has been resolved: cxl/mce: Make the MCE notifier per-region Flavien Solt reported lifetime issues with the CXL MCE notifier, which can lead to NULL dereferences and use-after-free in the MCE handler. The notifier was registered per memory device a...

CVE-2026-89562

In the Linux kernel, the following vulnerability has been resolved: ip6gre: fix hardware header length for NBMA tunnels ip6gretnllinkconfigroute accumulates the lower device's hardware header length into dev-hardheaderlen whenever headerops is set. This is incorrect for both users of headerops...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: rpm: python3-rpm-6.1.0-1.hum1 aarch64, x8664 rpm-6.1.0-1.hum1 aarch64, x8664 rpm-apidocs-6.1.0-1.hum1 noarch rpm-build-6.1.0-1.hum1 aarch64, x8664 rpm-build-libs-6.1.0-1.hum1 aarch64, x8664...

CLSA-2026-1789155227 TuxCare security update for dompurify (1 CVE)

TuxCare rebuilt dompurify to address 1 CVE. Fixed in 2.5.9-tuxcare.7...

CLSA-2026-1789154068 TuxCare security update for dompurify (12 CVEs)

TuxCare rebuilt dompurify to address 12 CVEs. Fixed in 3.0.3-tuxcare.5...

CLSA-2026-1789153936 TuxCare security update for dompurify (9 CVEs)

TuxCare rebuilt dompurify to address 9 CVEs. Fixed in 2.4.0-tuxcare.5...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.73 bug fix and security update

Red Hat OpenShift Container Platform release 4.14.73 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...

CLSA-2026-1789146579 TuxCare security update for dompurify (1 CVE)

TuxCare rebuilt dompurify to address 1 CVE. Fixed in 3.1.6-tuxcare.8...

CLSA-2026-1789142484 TuxCare security update for io.netty (4 CVEs)

TuxCare rebuilt 47 io.netty packages to address 4 CVEs. Fixed in 4.1.94.Final-tuxcare.2...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nodejs26: nodejs26-26.8.2-0.1.hum1 aarch64, x8664 nodejs26-bin-26.8.2-0.1.hum1 noarch nodejs26-devel-26.8.2-0.1.hum1 aarch64, x8664 nodejs26-docs-26.8.2-0.1.hum1 noarch...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: cups: cups-2.4.19-4.1.hum1 aarch64, x8664 cups-client-2.4.19-4.1.hum1 aarch64, x8664 cups-devel-2.4.19-4.1.hum1 aarch64, x8664 cups-filesystem-2.4.19-4.1.hum1 noarch cups-ipptool-2.4.19-4.1.hum1...

UBUNTU-CVE-2026-89258

Hugo is a static site generator. In versions after v0.123.0 and before v0.165.0, symlinks in parent directories were not dropped during direct resource lookups, allowing path confinement to be bypassed. An attacker who can place — or who convinces a site author to place — a symlink inside a mount...

CVE-2026-89258

Hugo is a static site generator. In versions after v0.123.0 and before v0.165.0, symlinks in parent directories were not dropped during direct resource lookups, allowing path confinement to be bypassed. An attacker who can place — or who convinces a site author to place — a symlink inside a mount...

perl-DBI security update

An update is available for perl-DBI. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list DBI is a database access Application Programming Interface API for the Perl...

RLSA-2026:66179 Important: perl-DBI security update

DBI is a database access Application Programming Interface API for the Perl Language. The DBI API Specification defines a set of functions, variables and conventions that provide a consistent database interface independent of the actual database being used. Security Fixes: DBI: Incomplete fix for...

EUVD-2026-76070

Hugo is a static site generator. In versions after v0.123.0 and before v0.165.0, symlinks in parent directories were not dropped during direct resource lookups, allowing path confinement to be bypassed. An attacker who can place — or who convinces a site author to place — a symlink inside a mount...

CLSA-2026-1789117092 TuxCare security update for mout (1 CVE)

TuxCare rebuilt mout to address 1 CVE. Fixed in 0.11.1-tuxcare.1...

Brave Desktop 1.95.101 Security Fixes

Fixed wallet permission list being shown only after page refresh. Upgraded Chromium to 153.0.8010.37 — refer to Google Chrome advisories for inherited CVEs...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: golang1.27: golang1.27-1.27.1-0.1.hum1 aarch64, x8664 golang1.27-bin-1.27.1-0.1.hum1 aarch64, x8664 golang1.27-docs-1.27.1-0.1.hum1 noarch golang1.27-misc-1.27.1-0.1.hum1 noarch...

SUSE CVE-2026-19546

A flaw was found in DBI. This is a fix for a partial fix for CVE-2026-14380 for RHEL 9.8.z and 10.2.z. For a detailed Statement, Description and Mitigation please reffer to the original https://access.redhat.com/security/cve/cve-2026-19546...