PYSEC-2026-645 instack-undercloud vulnerable to symlink attack on tmp files

A flaw was found in instack-undercloud 7.2.0 as packaged in Red Hat OpenStack Platform Pike, 6.1.0 as packaged in Red Hat OpenStack Platform Oacta, 5.3.0 as packaged in Red Hat OpenStack Newton, where pre-install and security policy scripts used insecure temporary files. A local user could exploi...

RHSA-2026:28047 Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (etcd) security update

Bulletin has no description...

RHSA-2026:28046 Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (golang-uber-multierr) security update

Bulletin has no description...

RHSA-2026:28044 Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (openstack-keystone) security update

Bulletin has no description...

RHSA-2026:28042 Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (python-pyasn1) security update

Bulletin has no description...

RHSA-2026:28043 Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (python-urllib3) security update

Bulletin has no description...

Important: Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (etcd) security update

An update for etcd is now available for Red Hat OpenStack Platform 17.1 Wallaby. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (python-urllib3) security update

An update for python-urllib3 is now available for Red Hat OpenStack Platform 17.1 Wallaby. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

RHEL 8 : Red Hat OpenStack Platform 17.1 (python-pyasn1) (RHSA-2026:28042)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:28042 advisory. This is an implementation of ASN.1 types and codecs in the Python programming language. Security Fixes: pyasn1: Denial of Service due to memory...

RHEL 8 : Red Hat OpenStack Platform 17.1 (python-urllib3) (RHSA-2026:28043)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:28043 advisory. Python HTTP module with connection pooling and file POST abilities. Security Fixes: urllib3: Unbounded decompression chain leads to resourc...

Important: Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 director Operator container images

Updated container images are now available for director Operator for Red Hat OpenStack Platform 17.1 Wallaby for RHEL 9.2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...

RHSA-2025:22969 Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (libwebsockets) security update

Bulletin has no description...

Important: Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (libwebsockets) security update

An update for libwebsockets is now available for Red Hat OpenStack Platform 17.1 Wallaby. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

RHSA-2025:17498 Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (python-django) security update

Bulletin has no description...

Important: Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (python-django20) security update

An update for python-django20 is now available for Red Hat OpenStack Platform 16.2 Train. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

RHEL 8 : Red Hat OpenStack Platform 16.2 (python-django20) (RHSA-2025:17499)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:17499 advisory. Security Fixes: Django SQL injection in FilteredRelation column aliases CVE-2025-57833 For more details about the security issues, including the...

EUVD-2024-44553

Malicious code in bioql PyPI...

RHSA-2025:7535 Red Hat Security Advisory: Red Hat OpenStack Platform 18.0 (python-h11) security update

Bulletin has no description...

RHEL 9 : Red Hat OpenStack Platform 18.0 (python-h11) (RHSA-2025:7535)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:7535 advisory. Security Fixes: h11 accepts some malformed Chunked-Encoding bodies CVE-2025-43859 For more details about the security issues, including the impact, a...

RHEL 9 : Red Hat OpenStack Platform 17.1 (python-h11) (RHSA-2025:7536)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:7536 advisory. Security Fixes: h11 accepts some malformed Chunked-Encoding bodies CVE-2025-43859 For more details about the security issues, including the impact, a...