Important: Red Hat Security Advisory: postgresql-jdbc security update

An update for postgresql-jdbc is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...

RHSA-2026:22147 Red Hat Security Advisory: qemu-kvm security update

Bulletin has no description...

RHSA-2026:22144 Red Hat Security Advisory: python security update

Bulletin has no description...

RHSA-2026:22143 Red Hat Security Advisory: php:8.2 security update

Bulletin has no description...

RHSA-2026:22141 Red Hat Security Advisory: go-fdo-client and go-fdo-server security update

Bulletin has no description...

RHSA-2026:22142 Red Hat Security Advisory: php:8.3 security update

Bulletin has no description...

RHSA-2026:22139 Red Hat Security Advisory: java-1.8.0-ibm security update

Bulletin has no description...

RHSA-2026:22136 Red Hat Security Advisory: webkitgtk4 security update

Bulletin has no description...

RHSA-2026:22135 Red Hat Security Advisory: fence-agents security update

Bulletin has no description...

RHSA-2026:22133 Red Hat Security Advisory: resource-agents security update

Bulletin has no description...

RHSA-2026:22134 Red Hat Security Advisory: fence-agents security update

Bulletin has no description...

RHSA-2026:22131 Red Hat Security Advisory: resource-agents security update

Bulletin has no description...

RHSA-2026:22132 Red Hat Security Advisory: resource-agents security update

Bulletin has no description...

RHSA-2026:22130 Red Hat Security Advisory: rhc security update

Bulletin has no description...

RHSA-2026:22110 Red Hat Security Advisory: ovn25.03 security update

Bulletin has no description...

RHSA-2026:22111 Red Hat Security Advisory: ovn25.09 security update

Bulletin has no description...

GHSA-698X-9W2P-7VVP Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints

A flaw was found in Clair. The fetcher component makes outbound HTTP requests to attacker-supplied URIs from manifest layer descriptors without IP or scheme filtering. When PSK authentication is not configured opt-in, not enforced by default, an unauthenticated attacker can submit a manifest with...

Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates

Summary IBM App Connect Enterprise Certified Container ACEcc is built on the Red Hat Universal Base Images. ACEcc operator versions 12.0.24 and 13.2.0 contain fixes to the listed CVEs found in the base images. This bulletin provides patch information to address the reported vulnerabilities...

CVE-2026-10517

Retracted following review by Red Hat Product Security and confirmation from the upstream Clair/Claircore maintainer. This CVE misattributes the described behavior to github.com/quay/claircore: the authentication mechanism in question optional PSK, HTTP endpoint /indexer/api/v1/indexreport is...

CVE-2026-10517

A flaw was found in Clair. The fetcher component makes outbound HTTP requests to attacker-supplied URIs from manifest layer descriptors without IP or scheme filtering. When PSK authentication is not configured opt-in, not enforced by default, an unauthenticated attacker can submit a manifest with...