libXfont2 security update

2.0.3-2.3 - CVE fix for: CVE-2026-59679 Resolves: https://redhat.atlassian.net/browse/RHEL-221956 2.0.3-2.2 - CVE fix for: CVE-2026-44950 Resolves: https://redhat.atlassian.net/browse/RHEL-222015...

CVE-2026-68005

An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...

.NET: .NET Elevation of Privilege Vulnerability

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...

.NET: .NET Core: .NET Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-19349

Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth2 state parameter stored as an SSO session in the GitHub and LinkedIn backends. Before redirecting to the identity provider, extractFormIn...

GHSA-H84G-69H7-MW6V vulnerabilities

Vulnerabilities for packages: debezium...

CVE-2026-55153 vulnerabilities

Vulnerabilities for packages: debezium...

GO-2026-6222 vulnerabilities

Vulnerabilities for packages: ollama, kitty, mattermost, rclone, seaweedfs, bento, kubescape, pdfcpu, gitea, mailpit...

CVE-2026-46603 vulnerabilities

Vulnerabilities for packages: ollama, kitty, mattermost, rclone, seaweedfs, bento, kubescape, pdfcpu, gitea, mailpit...

[SECURITY] Fedora 44 Update: rust-pretty-git-prompt-0.2.2-11.fc44

Your current git repository information inside a beautiful shell prompt...

[SECURITY] Fedora 44 Update: rust-git-interactive-rebase-tool-2.4.1-17.fc44

Full-featured terminal-based sequence editor for Git interactive rebase...

CVE-2026-73055

Shescape before 2.1.15 and 3.0.0 before 3.0.2 fails to properly escape tilde characters in assignment contexts on Unix systems where the shell is explicitly configured to "sh" or true and /bin/sh points to BusyBox. Using the escape and escapeAll APIs with untrusted input in an assignment prefixed...

CVE-2026-73055

Shescape before 2.1.15 and 3.0.0 before 3.0.2 fails to properly escape tilde characters in assignment contexts on Unix systems where the shell is explicitly configured to "sh" or true and /bin/sh points to BusyBox. Using the escape and escapeAll APIs with untrusted input in an assignment prefixed...

CVE-2026-55153 vulnerabilities

Vulnerabilities for packages: hono, airbyte-platform, airbyte-platform-fips, debezium, airbyte-server-fips...

GHSA-HJCP-JMPX-G3QM vulnerabilities

Vulnerabilities for packages: cloudwatch-exporter, logstash, thingsboard, apicurio-registry, dependency-track, sonarqube, trino, cassandra-reaper, druid, nrjmx, opensearch, kserve-modelmesh, wavefront-proxy, akhq...

CVE-2026-64607 vulnerabilities

Vulnerabilities for packages: cloudwatch-exporter, logstash, thingsboard, apicurio-registry, dependency-track, sonarqube, trino, cassandra-reaper, druid, nrjmx, opensearch, kserve-modelmesh, wavefront-proxy, akhq...

CVE-2026-74571

In the Linux kernel, the following vulnerability has been resolved: btrfs: skip global block reserve accounting for rescue mounts BUG Mounting with rescue=ibadroots after corrupting the block group tree root triggers a NULL pointer dereference: BUG: kernel NULL pointer dereference, address:...

CVE-2026-74568

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Fix race between LPI release and re-registration Fix a potential race between decrementing an LPI's reference count and evicting that structure from the LPI xarray. LPI structures are maintained in the VGIC LPI...

CVE-2026-74565

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: make nftobject rhltable per table The nftobject rhltable is global, this allows for accessing objects that are being dismangled from lookup path by other existing netns. Given the nftobjdestroy releases the...

CVE-2026-74566

In the Linux kernel, the following vulnerability has been resolved: keys: make keyring key-chunk byte order agree with keyringdiffobjects keyringgetkeychunk loads description bytes into the index chunk low address first, while keyringdiffobjects numbers the first differing bit from the low end an...