Security update for container-suseconnect

This update for container-suseconnect rebuilds it against the current go security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: SUSE...

Important: Red Hat Security Advisory: Red Hat AI Inference 3.4.4 (rocm)

Red Hat AI Inference 3.4.4 rocm is now available. Red Hat AI Inference...

Important: Red Hat Security Advisory: Red Hat AI Inference 3.4.4 (cuda)

Red Hat AI Inference 3.4.4 cuda is now available. Red Hat AI Inference...

Important: Red Hat Security Advisory: Red Hat AI Inference 3.4.4 (spyre)

Red Hat AI Inference 3.4.4 spyre is now available. Red Hat AI Inference...

Moderate: Red Hat Security Advisory: Red Hat AI Inference Model Optimization Tools 3.4.4 (cuda)

Red Hat AI Inference Model Optimization Tools 3.4.4 cuda is now available. Red Hat AI Inference Model Optimization Tools...

Important: Red Hat Security Advisory: Red Hat AI Inference 3.4.4 (cpu)

Red Hat AI Inference 3.4.4 cpu is now available. Red Hat AI Inference...

ROOT-APP-NPM-CVE-2025-58754 CVE-2025-58754 in axios - Patched by Root

Root has patched CVE-2025-58754 in the axios package for Root:npm. Multiple fixed versions available...

RLSA-2026:55787 Moderate: java-21-openjdk security update

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fixes: JDK: Improve Resource Resolving CVE-2026-60589 JDK: Enhance HTTP Connections CVE-2026-61308 JDK: Enhance TLS server CVE-2026-70907 For more details about the...

CVE-2026-75860 JSON Options <= 0.0.4 - Unauthenticated Arbitrary Options Update

The JSON Options WordPress plugin through 0.0.4 does not have any capability check or nonce verification on one of its actions, which runs on every request and is available to unauthenticated users, allowing them to update arbitrary WordPress options. This can be leveraged to enable user...

CVE-2026-75860

The JSON Options WordPress plugin (versions through 0.0.4) exposes an unauthenticated action on every request without capability checks or nonce verification, allowing arbitrary option updates. An attacker can enable user registration and set the default role to administrator, achieving privilege...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-140.14.0esr-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-firefox-140.14.0esr-i686-1slack15.0.txz: Upgraded. This update contains security fixes and improvements. For more...

GHSA-PPH6-FVMV-FJRC vulnerabilities

Vulnerabilities for packages: exim...

GHSA-Q496-Q274-JGH9 vulnerabilities

Vulnerabilities for packages: exim...

connectwise-automate-AiTM-rce

कनेक्टवाइज़ ऑटोमेट Adversary-in-the-Middle रिमोट कोड निष्पादन विषय-सूची पृष्ठभूमि समयरेखा विचार और सीख जिम्मेदार प्रकटीकरण PoC कोड कनेक्टवाइज़ को दी गई रिपोर्ट सारांश असुरक्षित कॉन्फ़िगरेशन प्रभाव तकनीकी विवरण 1. HTTP ट्रांसपोर्ट 2. अपर्याप्त प्रोटोकॉल सुरक्षा एन्क्रिप्शन और सत्यापन का अभाव 2.1...

CVE-2026-72522 affecting package expat for versions less than 2.8.3-1

CVE-2026-72522 affecting package expat for versions less than 2.8.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-70460 affecting package rsync for versions less than 3.5.0-1

CVE-2026-70460 affecting package rsync for versions less than 3.5.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-70463 affecting package rsync for versions less than 3.5.0-1

CVE-2026-70463 affecting package rsync for versions less than 3.5.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-70455 affecting package rsync for versions less than 3.5.0-1

CVE-2026-70455 affecting package rsync for versions less than 3.5.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-73076 affecting package vim for versions less than 9.2.0957-1

CVE-2026-73076 affecting package vim for versions less than 9.2.0957-1. An upgraded version of the package is available that resolves this issue...