GHSA-QF7C-7R9H-MM92 vulnerabilities

Vulnerabilities for packages: elasticsearch-fips, ruby4.0-elasticsearch, sonarqube...

GHSA-2VRF-HF26-JRP5 vulnerabilities

Vulnerabilities for packages: solr...

GHSA-2Q9X-HQ7P-V7M6 vulnerabilities

Vulnerabilities for packages: mysql...

GHSA-4WWW-5P9H-95MH vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, kubeflow-katib...

CVE-2025-27795 vulnerabilities

Vulnerabilities for packages: graphicsmagick...

CVE-2023-5384 vulnerabilities

Vulnerabilities for packages: infinispan...

CVE-2018-14040 vulnerabilities

Vulnerabilities for packages: grafana-fips, grafana...

CVE-2024-6485 vulnerabilities

Vulnerabilities for packages: grafana-fips, grafana...

GHSA-488M-W9FP-5MM2 vulnerabilities

Vulnerabilities for packages: infinispan...

GHSA-6HWG-W5JG-9C6X vulnerabilities

Vulnerabilities for packages: rancher-machine, docker-machine-driver-harvester...

GHSA-VP98-W2P3-MV35 vulnerabilities

Vulnerabilities for packages: druid...

GHSA-F7VH-QWP3-X37M vulnerabilities

Vulnerabilities for packages: druid...

GHSA-PPM8-GJFW-8977 vulnerabilities

Vulnerabilities for packages: ffmpeg...

GHSA-2VQ7-8VVF-W66V vulnerabilities

Vulnerabilities for packages: exim...

CVE-2025-1686 vulnerabilities

Vulnerabilities for packages: dependency-track...

mingw-libpng security update

1.6.34-1 - Rebase to version 1.6.34 - Fix the following CVEs CVE-2025-64720 CVE-2025-65018 CVE-2025-66293 - Resolves: RHEL-131458 - Resolves: RHEL-131471 - Resolves: RHEL-133229...

firefox: thunderbird: Privilege escalation in the Netmonitor component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Netmonitor component...

firefox: thunderbird: Same-origin policy bypass in the Request Handling component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Request Handling component...

CVE-2025-69223

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by AIOHTTP could exhaust the host's memory...

libtiff: Libtiff Write-What-Where

A flaw was found in Libtiff. This vulnerability is a "write-what-where" condition, triggered when the library processes a specially crafted TIFF image file. By providing an abnormally large image height value in the file's metadata, an attacker can trick the library into writing attacker-controll...