CVE-2026-41604

Out-of-bounds Read vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

CVE-2026-22009 affecting package mysql for versions less than 8.0.46-1

CVE-2026-22009 affecting package mysql for versions less than 8.0.46-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-35236 affecting package mysql for versions less than 8.0.46-1

CVE-2026-35236 affecting package mysql for versions less than 8.0.46-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-54505

A transient execution vulnerability within AMD CPUs may allow a local user-privileged attacker to leak data via the floating point divisor unit, potentially resulting in loss of confidentiality...

GHSA-58QW-9MGM-455V vulnerabilities

Vulnerabilities for packages: kubeflow-katib, pypy-3.10, py3.14-virtualenv, datadog-agent, py3-pip-wheel-bootstrap, py3-cassandra-medusa, py3-pip, pypy-3.11, py3-virtualenv...

firefox security update

140.10.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 140.10.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 140.10.0-1 - Update to 140.10.0 ESR...

CVE-2026-33557 vulnerabilities

Vulnerabilities for packages: debezium, apache-nifi, debezium-connector-ibmi, debezium-connector-informix, debezium-connector-spanner...

[SECURITY] Fedora 44 Update: stb-0^20260313git904aa67-2.fc44

Single-file public domain libraries for C/C++...

CVE-2026-39388 vulnerabilities

Vulnerabilities for packages: openbao...

GHSA-P49J-V9WC-WG57 vulnerabilities

Vulnerabilities for packages: openbao...

CVE-2026-39946 vulnerabilities

Vulnerabilities for packages: openbao...

GHSA-7CCV-RP6M-RFFR vulnerabilities

Vulnerabilities for packages: openbao...

CVE-2026-41043

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Apache ActiveMQ, Apache ActiveMQ Web. An authenticated attacker can show malicious content when browsing queues in the web console by overriding the content type to be HTML instead of XML and by injecting...

GHSA-76HW-P97H-883F vulnerabilities

Vulnerabilities for packages: nemo...

CVE-2026-41681 vulnerabilities

Vulnerabilities for packages: sccache, rpm-sequoia, rustup, sqlx, deno, vector, sdp-k8s-injector...

CVE-2026-35058

Improper validation of packet length during tls-crypt-v2 key extraction in OpenVPN 2.6.0 through 2.6.19 and 2.7alpha1 through 2.7.1 allows authenticated attackers to trigger a fatal assertion and cause a denial of service via a specially crafted packet...

GHSA-RR7J-V2Q5-CHGV vulnerabilities

Vulnerabilities for packages: open-webui, langfuse...

CVE-2026-28684 vulnerabilities

Vulnerabilities for packages: superset, kserve, ggshield...

openjdk: Improve Kerberos credentialing (Oracle CPU 2026-04)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JGSS. Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 a...

CVE-2026-35353

The mkdir utility in uutils coreutils incorrectly applies permissions when using the -m flag by creating a directory with umask-derived permissions typically 0755 before subsequently changing them to the requested mode via a separate chmod system call. In multi-user environments, this introduces ...