Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.37 bug fix and security update

Red Hat OpenShift Container Platform release 4.19.37 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...

RHSA-2026:36364 Red Hat Security Advisory: nginx security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2026:36348 Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2026:36331 Red Hat Security Advisory: nginx security, bug fix, and enhancement update

Bulletin has no description...

Important: Red Hat Security Advisory: RHACS 4.10.5 security and bug fix update

Updated images are now available for Red Hat Advanced Cluster Security RHACS, which typically include new features, bug fixes, and/or security patches. See the release notes link in the references section for a description of the fixes and enhancements in this particular release...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: golang1.26: golang1.26-1.26.5-0.1.hum1 aarch64, x8664 golang1.26-bin-1.26.5-0.1.hum1 aarch64, x8664 golang1.26-docs-1.26.5-0.1.hum1 noarch golang1.26-misc-1.26.5-0.1.hum1 noarch...

CVE-2026-55429 Coder's workspace app upsert allows cross-workspace agent rebinding via user-controlled app ID

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, UpsertWorkspaceApp overwrites an existing app's agentid on a primary-key conflict and insertAgentApp accepts the app ID from the provisioner's CompleteJob...

OPENSUSE-SU-2026:11215-1 libmbedtls23-4.2.0-1.1 on GA media

These are all security issues fixed in the libmbedtls23-4.2.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-56851

Name of the Vulnerable Software and Affected Versions OpenEXR versions 3.4.0 through 3.4.12 Description A crafted HTJ2K-compressed EXR file can cause an unconditional process abort, leading to a denial of service in applications that call the exr start read function on untrusted input. The issue...

OPENSUSE-SU-2026:11212-1 go1.25-1.25.12-1.1 on GA media

These are all security issues fixed in the go1.25-1.25.12-1.1 package on the GA media of openSUSE Tumbleweed...

Security update for hauler (important)

openSUSE security update: security update for hauler ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21262-1 Rating: important References: bsc1267150 bsc1269433 Cross-References: CVE-2026-25680 CVE-2026-25681 CVE-2026-27136 CVE-2026-42502...

libXfont2 -- Multiple vulnerabilities

X.Org project reports: Multiple issues have been found in the libXfont2 library published by X.Org for which we are releasing security fixes in libXfont2-2.0.8...

Security update for alloy (important)

openSUSE security update: security update for alloy ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21251-1 Rating: important References: bsc1260981 bsc1265440 bsc1266196 bsc1266654 bsc1267185 bsc1267333 bsc1267481 bsc1267485 bsc1267488 bsc1267489...

OPENSUSE-SU-2026:11217-1 nasm-3.02-1.1 on GA media

These are all security issues fixed in the nasm-3.02-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11219-1 perl-HTTP-Tiny-0.096-2.1 on GA media

These are all security issues fixed in the perl-HTTP-Tiny-0.096-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11220-1 python313-pytest-html-4.2.0-4.1 on GA media

These are all security issues fixed in the python313-pytest-html-4.2.0-4.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-56860

Name of the Vulnerable Software and Affected Versions FluidSynth versions prior to 2.5.6-1.1 Description A heap-based buffer overrun exists in the command handler. This occurs when a pitch bend range command is sent with an out-of-bounds channel argument, causing the system to attempt to write th...

Security update for assimp (important)

openSUSE security update: security update for assimp ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21242-1 Rating: important References: bsc1251019 bsc1266996 bsc1266998 bsc1266999 bsc1267037 Cross-References: CVE-2025-11277 CVE-2026-10197...

tomcat11-11.0.23-1.1 on GA media (moderate)

tomcat11-11.0.23-1.1 on GA media Announcement ID: openSUSE-SU-2026:11195-1 Rating: moderate Cross-References: CVE-2026-50229 CVE-2026-53404 CVE-2026-53434 CVE-2026-55276 CVE-2026-55955 CVE-2026-55956 CVSS scores: CVE-2026-50229 SUSE : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2026-5022...