CVE-2026-88884 Renovate before 44.3.1 Authentication Bypass via Digest Updates

Renovate is a dependency update automation tool. In versions before 44.3.1 and Mend Renovate CE/EE images before 15.4.0, mend-renovate-ce Helm chart before 15.4.0, mend-renovate-enterprise-edition Helm chart before 10.4.0, digest updates are not subject to the internal minimumReleaseAge stability...

CVE-2026-88881

Renovate versions before 44.11.3 are vulnerable to credential exfiltration when following pagination links in the HTTP Link header. The root cause is that the pagination URL returned by a GitHub server is not validated against the originally contacted host, allowing a malicious or compromised ser...

crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

A flaw was found in the crypto/tls package within the Go golang standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock,...

CLSA-2026-1789040951 TuxCare security update for nodemailer (4 CVEs)

TuxCare rebuilt nodemailer to address 4 CVEs. Fixed in 6.10.1-tuxcare.8...

CLSA-2026-1789040603 TuxCare security update for 23 packages (1 CVE)

TuxCare rebuilt 23 packages to address 1 CVE. Fixed in 1.10.4-tuxcare.1...

CLSA-2026-1789037282 TuxCare security update for nodemailer (3 CVEs)

TuxCare rebuilt nodemailer to address 3 CVEs. Fixed in 0.7.1-tuxcare.3...

CLSA-2026-1789034358 TuxCare security update for ajv (1 CVE)

TuxCare rebuilt ajv to address 1 CVE. Fixed in 6.10.2-tuxcare.1...

SUSE-SU-2026:4120-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-57841: net: fix memory leak in tcpconnrequest bsc1235944. - CVE-2025-68214: timers: Fix NULL function pointer race in timershutdownsync bsc1255225. -...

CLSA-2026-1789032018 TuxCare security update for vite (2 CVEs)

TuxCare rebuilt vite to address 2 CVEs. Fixed in 8.0.8-tuxcare.1...

CLSA-2026-1789031967 TuxCare security update for 6 packages (1 CVE)

TuxCare rebuilt 6 packages to address 1 CVE. Fixed in 1.11.20-tuxcare.2...

CLSA-2026-1789031855 TuxCare security update for vite (16 CVEs)

TuxCare rebuilt vite to address 16 CVEs. Fixed in 4.1.5-tuxcare.1...

CLSA-2026-1789031241 TuxCare security update for 9 packages (1 CVE)

TuxCare rebuilt 9 packages to address 1 CVE. Fixed in 5.18.1-tuxcare.6...

CLSA-2026-1789030963 TuxCare security update for xmldom (2 CVEs)

TuxCare rebuilt xmldom to address 2 CVEs. Fixed in 0.6.0-tuxcare.5...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.70 bug fix and security update

Red Hat OpenShift Container Platform release 4.16.70 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...

CLSA-2026-1789029484 TuxCare security update for 3 packages (2 CVEs)

TuxCare rebuilt 3 packages to address 2 CVEs. Fixed in 6.30.3-tuxcare.1...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.70 bug fix and security update

Red Hat OpenShift Container Platform release 4.16.70 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...

ROOT-APP-MAVEN-CVE-2024-50379 CVE-2024-50379 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root

Root has patched CVE-2024-50379 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.70 security and extras update

Red Hat OpenShift Container Platform release 4.16.70 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a security impact of...

osbuild-composer security update

An update is available for osbuild-composer. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A service for building customized OS artifacts, such as VM images an...

RLSA-2026:66016 Important: osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fixes: golang-fip...