5800 matches found
CLSA-2026-1779580341 qemu-kvm: Fix of CVE-2025-11234
CVE-2025-11234: io: use-after-free in websocket handshake code - Bump leading release 14 - 15 to overcome rpm-version-rank trap: previously released wrong-dist builds tagged .el9 outrank the correctly-tagged .el92 builds, blocking the proper release to stable. No source/code changes vs els9...
RHSA-2026:7412 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...
RHSA-2026:20334 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...
RHSA-2026:20074 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...
CLSA-2026-1779434064 libdnf: Fix of CVE-2021-3445
CVE-2021-3445: fix signature verification bypass via signature placed in the main RPM header...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python-pip: python-pip-wheel-26.1.1-3.hum1 noarch python3-pip-26.1.1-3.hum1 noarch python-pip-26.1.1-3.hum1.src src...
GHSA-PHQJ-4MHP-Q6MQ vulnerabilities
Vulnerabilities for packages: sdp-k8s-injector, sqlx, vector, sccache, rpm-sequoia, deno, rustup...
CVE-2026-45784 vulnerabilities
Vulnerabilities for packages: sdp-k8s-injector, sqlx, vector, sccache, rpm-sequoia, deno, rustup...
GHSA-PHQJ-4MHP-Q6MQ vulnerabilities
Vulnerabilities for packages: deno, ztunnel-fips, valkey-ldap, bootc, vector, guestproxyagent, komodo, rustup, sqlx, sentry-cli, sdp-k8s-injector, typst, sccache, rustls-openssl-client, rpm-sequoia...
CVE-2026-45784 vulnerabilities
Vulnerabilities for packages: deno, ztunnel-fips, valkey-ldap, bootc, vector, guestproxyagent, komodo, rustup, sqlx, sentry-cli, sdp-k8s-injector, typst, sccache, rustls-openssl-client, rpm-sequoia...
RHSA-2026:19106 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...
RHSA-2026:15856 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...
Astra Linux – Vulnerability in rpm
A flaw was discovered in the RPM package’s read functionality. This flaw allows an attacker to persuade a victim to install a seemingly verifiable package, or to compromise an RPM repository, thereby causing corruption of the RPM database. The most significant threat posed by this vulnerability i...
Astra Linux – Vulnerability in rpm
A flaw was discovered in RPM’s hdrblobInit function in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The greatest threat from this vulnerability is to system availability...
Astra Linux – Vulnerability in Zabbix
During Zabbix installation from RPM, the DACOVERRIDE SELinux capability is used to access PID files in the /var/run/zabbix folder. In this case, processes of Zabbix Proxy or Server can bypass the file read, write, and execute permission checks at the file system level...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: curl: curl-8.20.0-2.hum1 aarch64, x8664 libcurl-8.20.0-2.hum1 aarch64, x8664 libcurl-devel-8.20.0-2.hum1 aarch64, x8664 libcurl-minimal-8.20.0-2.hum1 aarch64, x8664 curl-8.20.0-2.hum1.src src...
SUSE SLED15 / SLES15 Security Update : PackageKit (SUSE-SU-2026:1939-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:1939-1 advisory. This update for PackageKit fixes the following issue: - CVE-2026-41651: race condition allows for arbitrary RPM package...
CVE-2026-42301
A flaw was found in pyp2spec, a tool that generates Fedora RPM spec files for Python projects. This vulnerability allows a malicious Python Package Index PyPI package to execute arbitrary commands on a build machine. This occurs because pyp2spec writes PyPI package metadata, such as the summary...
