137188 matches found
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: qt6: qt6-filesystem-6.11.2-1.hum1 aarch64, x8664 qt6-rpm-macros-6.11.2-1.hum1 noarch qt6-srpm-macros-6.11.2-1.hum1 noarch qt6-6.11.2-1.hum1.src src...
CVE-2026-71428 unstructured: Server-Side Request Forgery in the URL-based partitioning
The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more. From 0.4.7 until 0.24.0, the url argument of partition, partitionhtml, and partitionmd is fetched without host validation in...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: vim: vim-X11-9.2.967-1.1.hum1 aarch64, x8664 vim-common-9.2.967-1.1.hum1 aarch64, x8664 vim-data-9.2.967-1.1.hum1 noarch vim-default-editor-9.2.967-1.1.hum1 noarch vim-enhanced-9.2.967-1.1.hum1...
CVE-2026-55586
SumatraPDF 3.6.1 and earlier (Windows) contains a heap out-of-bounds write in the vendored CHMLib LZX decompressor. A crafted CHM file can supply malformed Huffman code lengths to make_decode_table in ext/CHMLib/lzx.c. In the long-code branch, internal nodes are written via next_symbol before val...
CVE-2026-61704 link-preview-js DNS Rebinding SSRF Bypass / Incomplete Fix for CVE-2026-43897
Link Preview JS extracts web links information. Prior to 4.0.4, the resolveDNSHost mitigation in index.ts validates one resolved IP address but fetches the original hostname, allowing an attacker-controlled DNS server to return a public address during validation and a loopback or internal address...
CVE-2026-61704 link-preview-js DNS Rebinding SSRF Bypass / Incomplete Fix for CVE-2026-43897
Link Preview JS extracts web links information. Prior to 4.0.4, the resolveDNSHost mitigation in index.ts validates one resolved IP address but fetches the original hostname, allowing an attacker-controlled DNS server to return a public address during validation and a loopback or internal address...
CVE-2026-61704 link-preview-js DNS Rebinding SSRF Bypass / Incomplete Fix for CVE-2026-43897
Link Preview JS extracts web links information. Prior to 4.0.4, the resolveDNSHost mitigation in index.ts validates one resolved IP address but fetches the original hostname, allowing an attacker-controlled DNS server to return a public address during validation and a loopback or internal address...
EUVD-2026-63480
LangBot is a global IM bot platform designed for LLMs. In version 4.10.7 and earlier, any authenticated user can add or change an STDIO MCP server configuration without an adequate authorization boundary. In src/langbot/pkg/provider/tools/loaders/mcp.py, StdioServerParameters accepts the configur...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.70 bug fix and security update
Red Hat OpenShift Container Platform release 4.13.70 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...
CVE-2026-55558
aiosmtplib is an asynchronous SMTP client for use with asyncio. Prior to 5.1.2, SMTPProtocol.starttls in src/aiosmtplib/protocol.py consumes the server's 220 response and starts the TLS handshake without clearing SMTPProtocol.buffer. An active network attacker can place attacker-chosen SMTP...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.70 bug fix and security update
Red Hat OpenShift Container Platform release 4.13.70 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...
CLSA-2026-1787236015 TuxCare security update for 13 packages (1 CVE)
TuxCare rebuilt 13 packages to address 1 CVE. Fixed in 14.2.35-tuxcare.8...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.96 bug fix and security update
Red Hat OpenShift Container Platform release 4.12.96 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...
CVE-2026-64969 Insecure Direct Object Reference in ATutor
ATutor is vulnerable to Insecure Direct Object Reference IDOR attack in profile picture related endpoints. Any authenticated user, including a student, can supply another user's memberid in a POST request to the profile album endpoint and permanently delete that user's profile picture, including...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.96 bug fix and security update
Red Hat OpenShift Container Platform release 4.12.96 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...
ROOT-OS-DEBIAN-11-CVE-2026-32775 CVE-2026-32775 in libexif - Patched by Root
Root has patched CVE-2026-32775 in the libexif package for Root:Debian:11. Multiple fixed versions available...
CLSA-2026-1787224571 TuxCare security update for gitpython (2 CVEs)
TuxCare rebuilt gitpython to address 2 CVEs. Fixed in 3.1.31.post8+tuxcare...
RHSA-2026:57253 Red Hat Security Advisory: kernel security, bug fix, and enhancement update
Bulletin has no description...