RHSA-2026:58474 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:58266 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:57765 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:41389 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:40938 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:39023 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:36017 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:36016 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:23423 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

CLSA-2026-1787374807 TuxCare security update for io.projectreactor.netty (1 CVE)

TuxCare rebuilt 4 io.projectreactor.netty packages to address 1 CVE. Fixed in 1.0.48-tuxcare.3...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: poppler: poppler-26.08.0-1.hum1 aarch64, x8664 poppler-cpp-26.08.0-1.hum1 aarch64, x8664 poppler-cpp-devel-26.08.0-1.hum1 aarch64, x8664 poppler-devel-26.08.0-1.hum1 aarch64, x8664...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: apr-util: apr-util-1.6.5-1.hum1 aarch64, x8664 apr-util-devel-1.6.5-1.hum1 aarch64, x8664 apr-util-ldap-1.6.5-1.hum1 aarch64, x8664 apr-util-lmdb-1.6.5-1.hum1 aarch64, x8664...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: oauth2-proxy: oauth2-proxy-7.15.4-0.1.hum1 aarch64, x8664 oauth2-proxy-7.15.4-0.1.hum1.src src...

Fedora 43 : kernel (2026-1eb1157853)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-1eb1157853 advisory. The 7.1.9 stable kernel update contains a number of important updates across the tree. We are now specifying all kernel updates as security because upstream...

PT-2026-80622

These are all security issues fixed in the hauler-2.0.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11574-1 hauler-2.0.3-1.1 on GA media

These are all security issues fixed in the hauler-2.0.3-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-53509

@aborruso/ckan-mcp-server (an MCP server for querying CKAN open data portals) is vulnerable to SSRF prior to version 0.4.106 . The validateServerUrl hostname check in src/utils/http.ts only blocked the literal string localhost, but hostname aliases such as ip6-localhost and ip6-loopback (defined ...

CVE-2026-53509 @aborruso/ckan-mcp-server: SSRF via base_url allows access to internal networks (Potential fix bypass of CVE-2026-33060)

CKAN MCP Server is a tool for querying CKAN open data portals. A known vulnerability CVE-2026-33060 indicated tools including ckanpackagesearch and sparqlquery that accept a baseurl parameter had the risk of making HTTP requests to arbitrary endpoints without restriction. A fix was applied to...

CLSA-2026-1787323624 TuxCare security update for org.springframework.security (3 CVEs)

TuxCare rebuilt 19 org.springframework.security packages to address 3 CVEs. Fixed in 6.2.7-tuxcare.4...

CVE-2026-77806

SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to code injection via an X-Spip-Filtre HTTP request header that is mishandled by analyseresultatskel...