postgresql:12 security update

12.22-12 - add postgresql-CVE-2026-18408.patch 12.22-11 - apply backport-of-the-patch-to-fix-CVE-2025-8714.patch 12.22-10 - Backport fixes for multiple CVEs - Resolves: CVE-2026-14662, CVE-2026-14664, CVE-2026-14668, CVE-2026-14669 - Resolves: CVE-2026-14670, CVE-2026-14671, CVE-2026-14677,...

GO-2026-6538 k8saudit shipped rules do not detect privileged/sensitive settings on init or ephemeral containers in github.com/falcosecurity/plugins/plugins/k8saudit

k8saudit shipped rules do not detect privileged/sensitive settings on init or ephemeral containers in github.com/falcosecurity/plugins/plugins/k8saudit...

CVE-2026-97935

The Linux kernel contains a slab-use-after-free vulnerability in the tracing subsystem. The issue occurs because hist_register_trigger() adds a histogram trigger to the global named_triggers list before validating the trace clock. If the clock string is unknown, tracing_set_clock() fails, causing...

CVE-2026-97572

In the Linux kernel, the following vulnerability has been resolved: bnxten: Propagate RX ring init failures in bnxtinitnic bnxtinitrxrings returns an error when bnxtalloconerxring fails, but bnxtinitnic discards that return value and calls bnxtinitchip, which enables TPA. If an allocation fails,...

PT-2026-98512

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bnxt en driver where the bnxt init nic function fails to propagate error return values from bnxt init rx rings. When bnxt alloc one rx ring fails, the return value...

PT-2026-98583

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the tracing component. The event hist trigger named init function adds a trigger to the global named triggers list before completing its...

PT-2026-98610

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the amd smn init function where PCI device reference counting is handled incorrectly. The local root pointer, used as a temporary variable during device search, does n...

PT-2026-98637

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the net: macb component during the probe error path. The macb mii init function creates a phylink instance, but if macb alloc tieoff or register netdev fails, the...

PT-2026-98664

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ltc428 clk provider setup function where the clk init data structure is not fully initialized. Specifically, the init.num parents member remains uninitialized, whi...

PT-2026-98753

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the btrfs module where the btrfs init new device function switches latest dev and potentially s bdev from the seed device to a new sprout device before the first...

Important: Red Hat Security Advisory: Red Hat Update Infrastructure 5.3 security update

The latest release of Red Hat Update Infrastructure. For more details, see the product documentation. Red Hat Update Infrastructure RHUI container images are based on the latest RHUI RPM packages and the ubi9 or ubi9-init base images. This release updates to the latest version...

PT-2026-98140

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the gfs2 module where the gfs2 quota init function checks for duplicate quota change IDs while holding the qd lock and the quota hash bucket bitlock. This process...

PT-2026-97936

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the aml spisg clk init function where the clk init data structure is not fully initialized. While the function populates init.parent data, it leaves init.parent names...

PT-2026-97947

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the powerpc/xive component. When the xive init ipis function fails, such as during a failure in irq domain alloc irqs, the error path frees the global xi...

PT-2026-104916

In the Linux kernel, the following vulnerability has been resolved: gfs2: fix quota init duplicate scan gfs2 quota init checks for duplicate quota change IDs while holding qd lock and the quota hash bucket bitlock. That path used gfs2 qd search bucket, which takes a lockref reference via lockref...

PT-2026-104932

In the Linux kernel, the following vulnerability has been resolved: gfs2: move quota init qc iterator increment Move qc++ from the loop body into the for-loop increment expression in gfs2 quota init. This keeps iterator progression explicit and avoids mixing pointer advance with duplicate-slot...

PT-2026-98139

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the gfs2 module where the qc++ iterator increment was located within the loop body of the gfs2 quota init function. This placement caused pointer advancement to be mix...

PT-2026-97939

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A circular locking dependency exists in the OCFS2 file system within the ocfs2 init acl function. The issue occurs between the &oi-ip xattr sem and &journal-j trans barrier locks. A...

Linux Distros Unpatched Vulnerability : CVE-2026-97521

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gfs2: fix quota init duplicate scan gfs2quotainit checks for duplicate quotachange IDs while holding qdlock and the quota hash bucket bitlock. That path used...

Oracle Linux 8 : postgresql:12 (ELSA-2026-69924)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-69924 advisory. - Add backport of CVE-2025-8714 Orabug: 38667546 - Resolves: CVE-2026-14662, CVE-2026-14664, CVE-2026-14668, CVE-2026-14669 - Resolves: CVE-2026-14670...