28970 matches found
Important: Red Hat Security Advisory: Red Hat build of Keycloak 26.4.14 Images Security Update
New images are available for Red Hat build of Keycloak 26.4.14 and Red Hat build of Keycloak 26.4.14 Operator, running on OpenShift Container Platform Red Hat build of Keycloak is an integrated sign-on solution, available as a Red Hat JBoss Middleware for OpenShift containerized image. The Red Ha...
EUVD-2026-53445
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 40.10.6, 41.9.1, 42.5.1, and 43.0.0, when a custom protocol handler returned a ProtocolResponse with a url and no session, Electron made the upstream request through defaultSession...
EUVD-2026-53436
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.6, 40.9.0, 41.1.1, and 42.0.0-beta.1, shell.openPath did not reject paths containing embedded null bytes. Apps that perform string-only validation of file paths, for example...
ROOT-APP-PYPI-CVE-2024-56201 CVE-2024-56201 in Jinja2 - Patched by Root
Root has patched CVE-2024-56201 in the Jinja2 package for Root:PyPI. Multiple fixed versions available...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana13.1: grafana13.1-13.1.1-0.5.2.hum1 aarch64, x8664 grafana13.1-13.1.1-0.5.2.hum1.src src Security Fixes: grafana13.1: CVE-2026-67313 CVE-2026-67314 CVE-2026-67315 CVE-2026-67316...
ROOT-APP-NPM-GHSA-J4MR-9XW3-C9JX GHSA-j4mr-9xw3-c9jx in base64-url - Patched by Root
Root has patched GHSA-j4mr-9xw3-c9jx in the base64-url package for Root:npm. Multiple fixed versions available...
Moderate: Red Hat Security Advisory: Red Hat JBoss Web Server 7.0.1 release and security update
Red Hat JBoss Web Server 7.0.1 zip release is now available for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 10, and Windows Server. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CV...
Astra Linux – Vulnerability in Firefox
Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11...
CVE-2026-17578
Kong Event Gateway versions 1.0.0 through 1.1.1 and 1.2.0 do not enforce key rotation before reaching NIST SP 800-38D recommended usage limit for AES-GCM encryption keys with random nonces when the AWS IAM encryption feature is enabled. If a producer sends messages at a sustained high rate withou...
RHSA-2026:50142 Red Hat Security Advisory: sg3_utils security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:49944 Red Hat Security Advisory: container-tools:rhel8 security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:49857 Red Hat Security Advisory: kernel security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:2711 Red Hat Security Advisory: Red Hat Ceph Storage 8.1 security and bug fix update
Bulletin has no description...
OPENSUSE-SU-2026:21534-1 Security update for wireshark
This update for wireshark fixes the following issues: Update to version 4.4.17. - CVE-2026-6867: SMB2 protocol dissector crash bsc1263727. - CVE-2026-7375: UDS protocol dissector infinite loop bsc1263761. - CVE-2026-7376: Sharkd utility crash bsc1263760. - CVE-2026-7378: Sharkd utility crash...
OPENSUSE-SU-2026:21533-1 Security update for dnsdist
This update for dnsdist fixes the following issues: Update to 1.9.15. Changes for dnsdist: - https://www.dnsdist.org/changelog.htmlchange-1.9.15 - https://www.dnsdist.org/changelog.htmlchange-1.9.14 Security issues fixed: - CVE-2026-40011: invalid output produced in the prometheus endpoint when a...
Security Bulletin: Multiple security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Buinsess Automation Workflow
Summary WebSphere Application Server is shipped as a component of IBM Business Automation Workflow. Information about security vulnerabilities affecting IBM WebSphere Application Server Traditional have been published in security bulletins. Vulnerability Details Refer to the security bulletins...
Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for July 2026.
Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Cloud Pak for Business Automation released in July 2026. Vulnerability Details CVEID:CVE-2026-40984 DESCRIPTION: In Micrometer, it is possible for a user to provid...
Critical: Red Hat Security Advisory: OpenShift Container Platform 4.19.41 bug fix and security update
Red Hat OpenShift Container Platform release 4.19.41 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...
Security Bulletin: IBM Engineering Lifecycle Management products using WebSphere Application Server Liberty is affected by a denial of service vulnerability with HTTP/2 (CVE-2026-11897)
Summary IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability with HTTP/2 when servlet-3.1, servlet-4.0, servlet-5.0, servlet-6.0, or servlet-6.1 is enabled. Following IBM Engineering Lifecycle Management products are vulnerable to this attack, it has been...