openssl security, bug fix, and enhancement update

3.5.8-1.0.1 - Replace upstream references Orabug: 34340177 - Update FIPS provider name Orabug: 35824276 1:3.5.8-1 - Rebase to OpenSSL 3.5.8 Resolves: RHEL-242944 Resolves: RHEL-246254 Resolves: RHEL-246266 Resolves: RHEL-246306 Resolves: RHEL-246437 Resolves: RHEL-246441 Resolves: RHEL-246445...

python-tornado security update

6.5.8-0.1 - Update to 6.5.8 Resolves: RHEL-247281...

python311-3.11.16-1.1 on GA media (moderate)

python311-3.11.16-1.1 on GA media Announcement ID: openSUSE-SU-2026:11756-1 Rating: moderate Cross-References: CVE-2021-4189 CVE-2026-45186 CVE-2026-72522 CVE-2026-9669 CVSS scores: CVE-2021-4189 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2026-45186 SUSE : 2.9...

tomcat-9.0.121-1.1 on GA media (moderate)

tomcat-9.0.121-1.1 on GA media Announcement ID: openSUSE-SU-2026:11759-1 Rating: moderate Cross-References: CVE-2026-65182 CVE-2026-65183 CVE-2026-65637 CVE-2026-65905 CVE-2026-65927 CVE-2026-66299 CVE-2026-66422 CVE-2026-68525 CVE-2026-68569 CVE-2026-68763 CVE-2026-73180 CVSS scores:...

python-tornado security update

6.5.8-0.1 - Update to 6.5.8 Resolves: RHEL-247266...

CVE-2026-82519: Missing Authorization

Really Simple Security plugin for WordPress before 9.8.2 contains a missing authorization check vulnerability that allows authenticated low-privileged attackers to bypass enforced two-factor authentication indefinitely by exploiting an unguarded code path in the profile-page update handler...

gstreamer1-plugins-base security update

1.16.1-7.0.1 - Update origin URL Orabug: 36209826 1.16.1-7 - Add patch for CVE-2026-85150 Resolves: RHEL-253741 1.16.1-6.1 - Add patch for CVE-2026-18297 Resolves: RHEL-246576...

PT-2026-91198

Incorrect Authorization vulnerability in Apache Syncope. An administrator with ClientApp's update entitlement is unable to perform the related operation, while ClientApp's create entitlement is checked both for create and update operations on ClientApp. This issue affects Apache Syncope: from...

Oracle Linux 10 : ELSA-2026-67154-0: / openssl (ELSA-2026-671540)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-671540 advisory. 3.5.8-1.0.1 - Replace upstream references Orabug: 34340177 - Update FIPS provider name Orabug: 35824276 1:3.5.8-1 - Rebase to OpenSSL 3.5.8 Resolves...

Oracle Linux 9 : ELSA-2026-67285-0: / rust (ELSA-2026-672850)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-672850 advisory. 1.92.0-2 - Apply libgit2 fix for CVE-2026-53587 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

ALSA-2026:67156 Moderate: perl security update

Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fixes: perl: Perl: Incorrect regular expression processing via large regular expressions CVE-2026-13221 For more details about the security issues, including the impac...

ALSA-2026:67155 Moderate: perl security update

Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fixes: perl: Perl: Incorrect regular expression processing via large regular expressions CVE-2026-13221 For more details about the security issues, including the impac...

git-lfs security update

3.4.1-13 - Rebuild with new Golang - Resolves: RHEL-241521, RHEL-242322, RHEL-241889...

ALSA-2026:67314 Important: nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 For more details about the security issues, including the impac...

osbuild-composer security update

176-1.0.3 - Fix CVE-2026-41178, CVE-2026-55677, CVE-2026-25681, CVE-2026-27136, CVE-2026-42502, CVE-2026-39821...

CVE-2026-81648 CryptoPayment Gateway 1.2.1 - 1.2.2 - Unauthenticated Arbitrary File Deletion and Settings Update via Unguarded AJAX Router

The CryptoPayment Gateway WordPress plugin from 1.2.1 to 1.2.2 does not apply an authorization check on one of its AJAX endpoints, allowing unauthenticated users to invoke administrative operations, including deleting arbitrary files on the server, overwriting the payment gateway configuration an...

[SECURITY] Fedora 44 Update: PackageKit-1.4.0-1.fc44

PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distro, cross-architecture API...

[SECURITY] Fedora 44 Update: golang-x-perf-0-0.36.20260904git19be9d8.fc44

This package holds the source for various tools related to performance measurement, storage, and analysis. - cmd/benchstat contains a command-line tool that computes and 7 compares statistics about benchmarks. - cmd/benchsave contains a command-line tool for publishing benchmark results. - storag...

[SECURITY] Fedora 44 Update: mongo-c-driver-1.30.9-1.fc44

mongo-c-driver is a client library written in C for MongoDB...

[SECURITY] Fedora 43 Update: golang-x-perf-0-0.36.20260904git19be9d8.fc43

This package holds the source for various tools related to performance measurement, storage, and analysis. - cmd/benchstat contains a command-line tool that computes and 7 compares statistics about benchmarks. - cmd/benchsave contains a command-line tool for publishing benchmark results. - storag...