Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nginx: nginx-1.30.4-2.hum1 aarch64, x8664 nginx-all-modules-1.30.4-2.hum1 noarch nginx-core-1.30.4-2.hum1 aarch64, x8664 nginx-filesystem-1.30.4-2.hum1 noarch nginx-mod-devel-1.30.4-2.hum1 aarch6...

RHSA-2026:32991 Red Hat Security Advisory: osbuild-composer security update

Bulletin has no description...

mm/slab: do not limit zeroing to orig_size when only red zoning is enabled

...

AZL-93957 CVE-2026-64530 affecting package kernel for versions less than 6.6.145.2-1

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: Handle TCACTCONSUMED in tcfqeventhandle tcfclassify can return TCACTCONSUMED while the skb is held by the defragmentation engine e.g. actct on out-of-order fragments. When that happens the skb is no longer owne...

CVE-2026-64530

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: Handle TCACTCONSUMED in tcfqeventhandle tcfclassify can return TCACTCONSUMED while the skb is held by the defragmentation engine e.g. actct on out-of-order fragments. When that happens the skb is no longer owne...

UBUNTU-CVE-2026-64530

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: Handle TCACTCONSUMED in tcfqeventhandle tcfclassify can return TCACTCONSUMED while the skb is held by the defragmentation engine e.g. actct on out-of-order fragments. When that happens the skb is no longer owne...

CVE-2026-64530

CVE-2026-64530 affects the Linux kernel net/sched subsystem. The root cause is that tcf_qevent_handle() did not properly handle TC_ACT_CONSUMED, causing the skb to be returned to the caller as if classification passed, while the defragmentation engine still owned it. This led to a use-after-free ...

CVE-2026-64530 net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: Handle TCACTCONSUMED in tcfqeventhandle tcfclassify can return TCACTCONSUMED while the skb is held by the defragmentation engine e.g. actct on out-of-order fragments. When that happens the skb is no longer owne...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: llvm21: clang21-21.1.8-8.hum1 aarch64, x8664 clang21-analyzer-21.1.8-8.hum1 aarch64, x8664 clang21-devel-21.1.8-8.hum1 aarch64, x8664 clang21-libs-21.1.8-8.hum1 aarch64, x8664...

Fedora 43 : moby-engine (2026-64ca3441c3)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-64ca3441c3 advisory. - Update to release v29.6.2 - Resolves: rhbz2496437 - Upstream security fixes - - GHSA-hw3h-2gp9-cxpv - - GHSA-qx3x-mv6r-52p6 - - GHSA-32pv-7hq5-qhwq - -...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: swift-lang: swift-lang-6.3.3-0.1.1.hum1 aarch64, x8664 swift-lang-runtime-6.3.3-0.1.1.hum1 aarch64, x8664 swift-lang-6.3.3-0.1.1.hum1.src src Security Fixes: swift-lang: CVE-2026-43823...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nodejs24: nodejs24-24.18.0-0.5.hum1 aarch64, x8664 nodejs24-bin-24.18.0-0.5.hum1 noarch nodejs24-devel-24.18.0-0.5.hum1 aarch64, x8664 nodejs24-docs-24.18.0-0.5.hum1 noarch...

Low: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nodejs26: nodejs26-26.5.0-1.5.hum1 aarch64, x8664 nodejs26-bin-26.5.0-1.5.hum1 noarch nodejs26-devel-26.5.0-1.5.hum1 aarch64, x8664 nodejs26-docs-26.5.0-1.5.hum1 noarch...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: loki3.7: loki3.7-3.7.4-0.1.hum1 aarch64, x8664 loki3.7-canary-3.7.4-0.1.hum1 aarch64, x8664 loki3.7-logcli-3.7.4-0.1.hum1 aarch64, x8664 loki3.7-3.7.4-0.1.hum1.src src...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: sqlite: lemon-3.53.4-0.1.hum1 aarch64, x8664 sqlite-3.53.4-0.1.hum1 aarch64, x8664 sqlite-analyzer-3.53.4-0.1.hum1 aarch64, x8664 sqlite-debug-3.53.4-0.1.hum1 aarch64, x8664...

SUSE CVE-2026-64368

In the Linux kernel, the following vulnerability has been resolved: mm/slab: do not limit zeroing to origsize when only red zoning is enabled When init zeroing on allocation is requested, for kmalloc we generally have to zero the full object size even if a smaller size is requested, in order to...

AZL-93467 CVE-2026-64368 affecting package kernel for versions less than 6.6.145.2-1

In the Linux kernel, the following vulnerability has been resolved: mm/slab: do not limit zeroing to origsize when only red zoning is enabled When init zeroing on allocation is requested, for kmalloc we generally have to zero the full object size even if a smaller size is requested, in order to...

CVE-2026-64368

In the Linux kernel, the following vulnerability has been resolved: mm/slab: do not limit zeroing to origsize when only red zoning is enabled When init zeroing on allocation is requested, for kmalloc we generally have to zero the full object size even if a smaller size is requested, in order to...

UBUNTU-CVE-2026-64368

In the Linux kernel, the following vulnerability has been resolved: mm/slab: do not limit zeroing to origsize when only red zoning is enabled When init zeroing on allocation is requested, for kmalloc we generally have to zero the full object size even if a smaller size is requested, in order to...

CVE-2026-64368

In the Linux kernel, the following vulnerability has been resolved: mm/slab: do not limit zeroing to origsize when only red zoning is enabled When init zeroing on allocation is requested, for kmalloc we generally have to zero the full object size even if a smaller size is requested, in order to...