Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.37 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.37 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

CLSA-2026-1788863918 TuxCare security update for pillow (1 CVE)

TuxCare rebuilt pillow to address 1 CVE. Fixed in 9.4.0.post6+tuxcare...

CLSA-2026-1788862742 TuxCare security update for loopback (1 CVE)

TuxCare rebuilt loopback to address 1 CVE. Fixed in 1.10.0-tuxcare.3...

CLSA-2026-1788862348 TuxCare security update for request (1 CVE)

TuxCare rebuilt request to address 1 CVE. Fixed in 2.65.0-tuxcare.2...

CLSA-2026-1788862060 TuxCare security update for django (1 CVE)

TuxCare rebuilt django to address 1 CVE. Fixed in 5.1.10.post4+tuxcare...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: glibc: compat-libpthread-nonshared-2.43-8.5.hum1 aarch64, x8664 glibc-2.43-8.5.hum1 aarch64, x8664 glibc-all-langpacks-2.43-8.5.hum1 aarch64, x8664 glibc-benchtests-2.43-8.5.hum1 aarch64, x8664...

OPENSUSE-SU-2026:21815-1 Security update for waylyrics

This update for waylyrics fixes the following issues: Changes in waylyrics: - Update to version 0.4.0 CVE-2026-25541 bsc1274106 Added plugin architecture and SakuraLLM translation plugin Added OpenCC support for Simplified/Traditional Chinese Added support for custom CSS themes and style presets...

SUSE-SU-2026:23476-1 Security update for multipath-tools

This update for multipath-tools fixes the following issues: - Heap Out-of-Bounds Read in Custom Format String Parser via Trailing % bsc1277205. - Path traversal in device-mapper-multipath failedwwids management bsc1277210. - SCSI PRIN READ FULL STATUS responses can cause heap buffer overflows...

Gladinet CentreStack & Triofox - Hardcoded Credentials

Gladinet CentreStack and Triofox 16.12.10420.56791 contain a hardcoded credentials vulnerability caused by use of hardcoded AES cryptoscheme values, letting attackers perform arbitrary local file inclusion without authentication, potentially leading to full system compromise. id: CVE-2025-14611...

N-central - XML External Entities Injection

N-central versions %xxe; rand http: - raw: - | POST /dms/services/ServerUI HTTP/2 Host: Hostname Content-Type: text/xml Soapaction: "" soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope...

Adobe Commerce - Authentication Bypass

Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Improper Input Validation vulnerability. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality, and integrity impact to high...

CMP WordPress < 4.0.19 - Broken Access Control

CMP WordPress plugin 4.0.19 contains an arbitrary page layout change caused by insufficient access control in the coming soon page feature, letting unauthenticated users modify the layout, exploit requires no authentication. id: CVE-2022-0188 info: name: CMP WordPress 4.0.19 - Broken Access Contr...

HPE OneView - Remote Code Execution

HPE OneView contains a remote code execution vulnerability, letting remote attackers execute arbitrary code. id: CVE-2025-37164 info: name: HPE OneView - Remote Code Execution author: DhiyaneshDk,garciaizcoa severity: critical description: | HPE OneView contains a remote code execution...

CLSA-2026-1788859631 TuxCare security update for urllib3 (3 CVEs)

TuxCare rebuilt urllib3 to address 3 CVEs. Fixed in 2.0.7.post3+tuxcare...

CVE-2026-62653

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. The input received over a proprietary communication protocol that is exposed when the device is placed into a special firmware-update mode is not properly validated, resulting in a memory corruption condition. This could all...

SUSE-SU-2026:23526-1 Security update for multipath-tools

This update for multipath-tools fixes the following issues: - Heap Out-of-Bounds Read in Custom Format String Parser via Trailing % bsc1277205. - Path traversal in device-mapper-multipath failedwwids management bsc1277210. - SCSI PRIN READ FULL STATUS responses can cause heap buffer overflows...

CLSA-2026-1788858730 TuxCare security update for protobuf (1 CVE)

TuxCare rebuilt protobuf to address 1 CVE. Fixed in 4.24.3.post2+tuxcare...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

EUVD-2026-72667

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. The input received over a proprietary communication protocol that is exposed when the device is placed into a special firmware-update mode is not properly validated, resulting in a memory corruption condition. This could all...

CVE-2026-62653

A vulnerability in Reyrolle 7SR5 (all versions prior to V2.70 ) allows an unauthenticated attacker with physical access to trigger a memory corruption condition. The flaw lies in improper validation of input received over a proprietary communication protocol that is only exposed when the device i...