PT-2026-100005

Security vulnerability affects the ztunnel-fips package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100461

Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101706

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101720

Security vulnerability affects the py3-tornado package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-99828

Multiple security vulnerabilities affect the eck-operator package. A norm. See references for individual vulnerability details...

PT-2026-101156

Security vulnerability affects the rancher-fleet-agent package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-72701

creationtimestamp| type| source ---|---|--- 2026-09-17 22:35:34+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-38p6-h87p-r4cg...

DEBIAN-CVE-2026-73639

Imager::File::PNG versions from 1.003 before 1.004 for Perl write past the end of the row buffer reading a PNG with a tRNS transparency chunk in readdirect8. With a tRNS chunk, readdirect8 adds an alpha channel to the image it creates but still sizes the row buffer from the original channel count...

CVE-2026-73639

Imager::File::PNG versions from 1.003 before 1.004 for Perl write past the end of the row buffer reading a PNG with a tRNS transparency chunk in readdirect8. With a tRNS chunk, readdirect8 adds an alpha channel to the image it creates but still sizes the row buffer from the original channel count...

DEBIAN-CVE-2026-54604

OpenSlide is a C library for reading whole slide image files. Prior to 4.0.1, a behavior change in libtiff 4.7.1 causes the indirect TIFF tile path in src/openslide-decode-tiff.c and openslidetiffreadtile to request a full-height destination for a partial bottom tile row, allowing uninitialized...

DEBIAN-CVE-2026-48977

OpenSlide is a C library for reading whole slide image files. From 3.4.1 until 4.0.1, OpenSlide's parselevel0xml processing in src/openslide-vendor-ventana.c accepts nonpositive row or column tile counts from a crafted Ventana BIF file. The invalid counts produce attacker-controlled relative memo...

UBUNTU-CVE-2026-54604

OpenSlide is a C library for reading whole slide image files. Prior to 4.0.1, a behavior change in libtiff 4.7.1 causes the indirect TIFF tile path in src/openslide-decode-tiff.c and openslidetiffreadtile to request a full-height destination for a partial bottom tile row, allowing uninitialized...

Grav: Missing admin.super guard on core group blueprint access field allows admin.users operator to escalate to super-admin

Summary The core Flex group blueprint system/blueprints/user/group.yaml access field, lines 48-55 omits the security@: admin.super field guard that its sibling account blueprint carries account.yaml:131/138/150, added by the CVE-2026-42613 fix. A delegated non-super operator holding...

Security Bulletin: DEV-EXT - tomcat-embed-core-10.1.57.jar (Publicly disclosed vulnerability found by Scanner)

Summary Multiple vulnerabilities reported in tomcat-embed-core-10.1.57.jar detected by Mend scanner in db2-service-java/pom.xml. The affected version 10.1.57 is vulnerable to 9 CVEs covering improper access control, authentication bypass, TOCTOU race condition, improper authorization, improper...

[SECURITY] [DSA 6506-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6506-1 [email protected] https://www.debian.org/security/ Andres Salomon September 17, 2026 https://www.debian.org/security/faq -...

CVE-2026-69089

creationtimestamp| type| source ---|---|--- 2026-09-17 18:35:11+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-w3f4-8pj2-599w...

CVE-2026-69147

creationtimestamp| type| source ---|---|--- 2026-09-17 18:35:09+00:00| published-proof-of-concept| https://github.com/vllm-project/vllm/security/advisories/GHSA-8pw2-6jv3-mj5j...

Important: Red Hat Security Advisory: Red Hat AI Base Images 3.3.3 (Spyre)

Red Hat AI Base Images 3.3.3 Spyre is now available. Red Hat® AI Base Images...

Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root

A critical vulnerability in Check Point's Security Management and Log Servers could allow an attacker without login credentials to run code as root on those servers over the network. The Security Management Server is the system that controls firewall policy and administrator access. Check Point h...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.71 bug fix and security update

Red Hat OpenShift Container Platform release 4.13.71 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...