CVE-2026-62531

creationtimestamp| type| source ---|---|--- 2026-08-19 17:49:12+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-61268

creationtimestamp| type| source ---|---|--- 2026-08-19 17:47:52+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-75142

FFmpeg before commit 9d786e4 contains a stack buffer overflow in the MPEG-PS muxer libavformat/mpegenc.c. When muxing input with more streams than the muxer's fixed-size stack buffer accommodates, the buffer is overflowed. A crafted input with an excessive number of streams triggers the overflow...

CVE-2026-75141

FFmpeg before commit acf5d7c contains a heap buffer overflow in the hvcC box writer. When writing an HEVC configuration record with more NAL units of a single type than the count field can represent, the NAL unit count overflows, causing a heap buffer overflow. A crafted HEVC input file triggers...

CVE-2026-75147

FFmpeg before commit 983dae9 contains an out-of-bounds read in the AV1 RTP packetizer libavformat/rtpencav1.c. The keyframe detection loop that searches for a sequence header OBU advanced its pointer and remaining-size counter by the encoded header length plus the OBU payload size without first...

CVE-2026-62666 Grav API Plugin: non-super api.users.write manager -> super-admin via createApiKey (incomplete fix of CVE-2026-59190); + 2FA strip of super

Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content. Prior to 1.0.6, Grav API plugin UsersController::createApiKey, generate2fa, and disable2fa omit the accessGrantsSuper target check used by sibling user mutation endpoints. A non-super account...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: openssl3: openssl3-devel-3.5.7-2.2.hum1 aarch64, x8664 openssl3-devel-engine-3.5.7-2.2.hum1 aarch64, x8664 openssl3-libs-3.5.7-2.2.hum1 aarch64, x8664 openssl3-3.5.7-2.2.hum1.src src...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.20.17 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.20.17 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.20.17 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-8962: RHODF 4.20.17 release DFBUGS-8003: GSS Rook Ceph metrics are not being scraped, and the...

CLSA-2026-1787149562 TuxCare security update for 24 packages (2 CVEs)

TuxCare rebuilt 24 packages to address 2 CVEs. Fixed in 9.4.41.v20210516-tuxcare.4...

Low: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.10: python3.10-3.10.21-1.hum1 aarch64, x8664 python3.10-debug-3.10.21-1.hum1 aarch64, x8664 python3.10-devel-3.10.21-1.hum1 aarch64, x8664 python3.10-idle-3.10.21-1.hum1 aarch64, x8664...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.18.53 bug fix and security update

Red Hat OpenShift Container Platform release 4.18.53 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.43 bug fix and security update

Red Hat OpenShift Container Platform release 4.19.43 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: aardvark-dns: aardvark-dns-2.1.0-1.hum1 aarch64, x8664 aardvark-dns-tests-2.1.0-1.hum1 aarch64, x8664 aardvark-dns-2.1.0-1.hum1.src src...

MINI-54MF-QWJ3-GMV3

Bulletin has no description...

httpd: incomplete fix for CVE-2023-38709

A flaw was found in httpd. The response headers are not sanitized before an HTTP response is sent when a malicious backend can insert a Content-Type, Content-Encoding, or some other headers. These issues lead to HTTP response splitting. This CVE provides a "complete" fix for CVE-2023-38709...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.21.11 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.21.11 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.21.11 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-9563: Backport to odf-4.21.10 Race condition may allow multiple CephCluster reconciles in parallel...

CLSA-2026-1787141079 TuxCare security update for log4j:log4j (1 CVE)

TuxCare rebuilt log4j:log4j to address 1 CVE. Fixed in 1.2.16-tuxcare.2...

Lemur: Incomplete fix for GHSA-v2wp-frmc-5q3v -- ACME authority update endpoint allows non-admin to replace `acme_url` with internal IP, bypassing allowlist

SummaryThe fix for GHSA-v2wp-frmc-5q3v added validateacmeurl to reject acmeurl values not in ACMEDIRECTORYHOSTALLOWLIST, but the validation is only called at authority creation time POST. The authority update endpoint PUT /api/1/authorities/ accepts and stores arbitrary options -- including a...

Lemur: SSRF protection in certificate revocation checking bypassable via HTTP redirects and DNS rebinding (incomplete fix for GHSA-54vg-pfh7-jq95)

SummaryThe SSRF mitigation added for GHSA-54vg-pfh7-jq95 validaterevocationurl in lemur/certificates/verify.py can be bypassed. An operator-role user who uploads a certificate with attacker-controlled CRL/OCSP extensions can still make Lemur reach internal destinations RFC1918, loopback, link-loc...

PYSEC-2026-3679 Lemur: Incomplete fix for GHSA-v2wp-frmc-5q3v -- ACME authority update endpoint allows non-admin to replace `acme_url` with internal IP, bypassing allowlist

Summary The fix for GHSA-v2wp-frmc-5q3v added validateacmeurl to reject acmeurl values not in ACMEDIRECTORYHOSTALLOWLIST, but the validation is only called at authority creation time POST. The authority update endpoint PUT /api/1/authorities/ accepts and stores arbitrary options -- including a...