Important: Red Hat Security Advisory: Assisted Installer RHEL 8 components for Multicluster Engine for Kubernetes 2.6.11

Assisted installer RHEL 8 components for the multicluster engine for Kubernetes 2.6.11 General Availability release, with updates to container images. Assisted Installer RHEL 8 integrates components for the general multicluster engine for Kubernetes 2.6.11 release that simplify the process of...

PT-2026-40970

Name of the Vulnerable Software and Affected Versions Fleet versions prior to 4.81.0 Description A denial-of-service DoS issue exists in the gRPC Launcher "PublishLogs" endpoint. Certain unexpected input values are not handled gracefully, which can cause the server process to terminate while...

OPENSUSE-SU-2026:10777-1 ImageMagick-7.1.2.22-1.1 on GA media

These are all security issues fixed in the ImageMagick-7.1.2.22-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10783-1 ucode-intel-20260512-1.1 on GA media

These are all security issues fixed in the ucode-intel-20260512-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10781-1 perl-libwww-perl-6.830.0-1.1 on GA media

These are all security issues fixed in the perl-libwww-perl-6.830.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10780-1 perl-Net-CIDR-Lite-0.240.0-1.1 on GA media

These are all security issues fixed in the perl-Net-CIDR-Lite-0.240.0-1.1 package on the GA media of openSUSE Tumbleweed...

OpenAI’s GPT-5.5 is as Good as Mythos at Finding Security Vulnerabilities

The UK's AI Security Institute evaluated GPT-5.5's ability to find security vulnerabilities, and found that it is comparable to Claude Mythos. Note that the OpenAI model is generally available. Here is the Institute's evaluation of Mythos. And here is an analysis of a smaller, cheaper model. It...

CVE-2026-8199

CVE-2026-8199 affects MongoDB Server before certain patched versions across multiple lines: v7.0 <7.0.34, v8.0 <8.0.23, v8.2 <8.2.9, and v8.3

OPENSUSE-SU-2026:10776-1 tekton-cli-0.45.0-1.1 on GA media

These are all security issues fixed in the tekton-cli-0.45.0-1.1 package on the GA media of openSUSE Tumbleweed...

The vulnerability of the LibreOffice office software package, related to writing beyond the buffer limit, allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the LibreOffice office software package is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

OPENSUSE-SU-2026:10767-1 ffmpeg-4-4.4.6-12.1 on GA media

These are all security issues fixed in the ffmpeg-4-4.4.6-12.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10768-1 ffmpeg-7-7.1.3-3.1 on GA media

These are all security issues fixed in the ffmpeg-7-7.1.3-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10769-1 flux2-cli-2.8.7-1.1 on GA media

These are all security issues fixed in the flux2-cli-2.8.7-1.1 package on the GA media of openSUSE Tumbleweed...

VMware ESXi 安全漏洞

VMware ESXi is a server virtualization platform developed by the American company VMware, which can be directly installed on physical servers. VMware ESXi has a security vulnerability that stems from unreliable pointer dereferencing. This vulnerability could allow attackers to access kernel memor...

CVE-2025-62627: Untrusted Pointer Dereference

An untrusted pointer dereference in the ionic cloud driver for VMWare ESXi could allow an attacker with an unprivileged VM to read kernel memory or co-located guest VM memory, potentially resulting in loss of confidentiality or availability...

OPENSUSE-SU-2026:10775-1 rsync-3.4.1-5.1 on GA media

These are all security issues fixed in the rsync-3.4.1-5.1 package on the GA media of openSUSE Tumbleweed...

libvinylapi3-9.0.0-1.1 on GA media (moderate)

libvinylapi3-9.0.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10751-1 Rating: moderate Cross-References: CVE-2013-4484 CVE-2019-15892 CVE-2022-23959 CVE-2022-38150 CVE-2022-45059 CVE-2022-45060 CVE-2023-44487 CVE-2025-30346 CVSS scores: CVE-2022-23959 SUSE : 7.4...

jupyter-jupyterlab-4.5.7-1.1 on GA media (moderate)

jupyter-jupyterlab-4.5.7-1.1 on GA media Announcement ID: openSUSE-SU-2026:10748-1 Rating: moderate Cross-References: CVE-2026-40171 CVE-2026-42266 CVE-2026-42557 Affected Products: openSUSE Tumbleweed An update that solves 3 vulnerabilities can now be installed. Description: These are all securi...

CVE-2026-44222

vLLM is an inference and serving engine for large language models LLMs. From 0.6.1 to before 0.20.0, there is a a Token Injection vulnerability in vLLM’s multimodal processing. Unauthenticated, text-only prompts that spell special tokens are interpreted as control. Image and video placeholder...

CVE-2026-44222 vLLM: Remote DoS via Special-Token Placeholders

vLLM is an inference and serving engine for large language models LLMs. From 0.6.1 to before 0.20.0, there is a a Token Injection vulnerability in vLLM’s multimodal processing. Unauthenticated, text-only prompts that spell special tokens are interpreted as control. Image and video placeholder...