RHSA-2026:1540 Red Hat Security Advisory: OpenShift Container Platform 4.15.61 packages and security update

Bulletin has no description...

RHSA-2023:5810 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.3 Product Security and Bug Fix Update

Bulletin has no description...

GHSA-G7HG-VRCF-MVMR vulnerabilities

Vulnerabilities for packages: cassandra-fips, pinot, seata, cassandra, tez, apache-hop-fips, pinot-fips, thingsboard, hadoop-fips, management-api-for-apache-cassandra-5.0, apache-hop...

GHSA-272M-GCWP-MPWG vulnerabilities

Vulnerabilities for packages: cassandra-fips, pinot, seata, cassandra, tez, apache-hop-fips, pinot-fips, thingsboard, hadoop-fips, management-api-for-apache-cassandra-5.0, apache-hop...

GHSA-C69G-56F8-XWQJ vulnerabilities

Vulnerabilities for packages: elasticsearch-fips, kafbat-ui, opensearch-fips, elasticsearch, strimzi-kafka-operator-fips, traccar-fips, kayenta-fips, s3proxy-fips, airbyte-server-fips, kayenta, floci-az, traccar, zipkin, kafka-bridge-fips, request-9047-keycloak-fips, cloudwatch-exporter,...

CVE-2026-63317

Arbitrary Class Instantiation via XML Feature Generator Descriptor and Format Name in Apache OpenNLP Versions Affected: - before 2.5.10 - before 3.0.0-M5 Description: Three code paths in Apache OpenNLP load a class by its fully-qualified name via Class.forName and invoke its no-arg constructor...

CVE-2026-54133 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-64649 vulnerabilities

Vulnerabilities for packages: keep, keep-fips, langfuse-fips, langfuse, peerdb-ui, jitsucom-jitsu, homepage...

[SECURITY] Fedora 43 Update: dotnet8.0-8.0.129-2.fc43

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

[SECURITY] Fedora 44 Update: dotnet8.0-8.0.129-2.fc44

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

[SECURITY] Fedora 44 Update: dotnet9.0-9.0.119-1.fc44

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

PT-2026-64342

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Certain platform drivers handling core ACPI devices fail to verify the presence of a device's ACPI companion object during the probe process. Because device match driver override can for...

PT-2026-71915

Name of the Vulnerable Software and Affected Versions Budibase versions prior to 3.39.24 Description An issue exists where the endpoint "/api/public/v1/roles/assign" calls the validateGlobalRoleUpdate function without verifying the appBuilder.appId or role.appId variables. This allows an app-scop...

ROS-20260724-73-0018

The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Rockwell FactoryTalk Services Platform 6.60 Authentication Bypass (SD1786)

The version of Rockwell FactoryTalk Services Platform installed on the remote Windows host is 6.60. It is, therefore, affected by an authentication bypass vulnerability: - A vulnerability exists that allows an attacker to bypass JWT signature validation during Okta Web Authentication. The...

CVE-2026-56444 affecting package unbound for versions less than 1.25.2-1

CVE-2026-56444 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-44690 affecting package unbound for versions less than 1.25.2-1

CVE-2026-44690 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-44687 affecting package unbound for versions less than 1.25.2-1

CVE-2026-44687 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-48012 Shopware SSO referer trust leading to an arbitrary redirect target

Shopware is an open commerce platform. Versions 6.7.3.0 through 6.7.10.0 have an open redirect in Shopware's public SSO entry point at GET /api/oauth/sso/auth. When the endpoint is reached without the expected SSO session state, the application falls back to the request's Referer header and uses...

CVE-2026-65705

FFmpeg versions 3.4 through 8.1.2 contain an out-of-bounds write vulnerability in the vffloodfill video filter that allows attackers to corrupt heap memory by supplying a dynamically sized video stream with filtergraph reinitialization disabled via -reinitfilter 0. When configinput allocates the...