Important: Red Hat Security Advisory: Moderate: Red Hat Advanced Cluster Management for Kubernetes v2.13.5 security update

Red Hat Advanced Cluster Management for Kubernetes 2.13 General Availability release images, which add new features and enhancements, bug fixes, and updated container images. Red Hat Advanced Cluster Management for Kubernetes 2.13 images Red Hat Advanced Cluster Management for Kubernetes provides...

RLSA-2026:0594 Moderate: libpq security update

The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers. Security Fixes: postgresql: libpq undersizes allocations, via integer wraparound CVE-2025-12818 For more details about the security issues, including the impact, a CVSS score,...

ocfs2: fix kernel BUG in ocfs2_find_victim_chain

...

iavf: fix off-by-one issues in iavf_config_rss_reg()

...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.84 bug fix and security update

Red Hat OpenShift Container Platform release 4.12.84 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...

CVE-2025-71080

A race condition vulnerability was found in the Linux kernel's IPv6 routing subsystem on PREEMPTRT kernels. When rt6getpcpuroute returns NULL and the task is preempted, another task can install a per-CPU route entry. When the original task resumes and attempts cmpxchg in rt6makepcpuroute, the...

SUSE CVE-2025-68794

In the Linux kernel, the following vulnerability has been resolved: iomap: adjust read range correctly for non-block-aligned positions iomapadjustreadrange assumes that the position and length passed in are block-aligned. This is not always the case however, as shown in the syzbot generated case...

Security update for tomcat (important)

openSUSE security update: security update for tomcat ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20034-1 Rating: important References: bsc1252753 bsc1252756 bsc1252905 Cross-References: CVE-2025-55752 CVE-2025-55754 CVE-2025-61795 CVSS scores:...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001849)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001849 advisory. The emsysenter function in arch/x86/kvm/emulate.c in the Linux kernel before 3.18.5, when the guest OS lacks SYSENTER MSR initialization, allows guest OS users to ga...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002227)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002227 advisory. The sctpinit function in net/sctp/protocol.c in the Linux kernel before 4.2.3 has an incorrect sequence of protocol-initialization steps, which allows local users to...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002571)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002571 advisory. Off-by-one error in the pipeadvance function in lib/ioviter.c in the Linux kernel before 4.9.5 allows local users to obtain sensitive information from uninitialized...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003082)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003082 advisory. An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.17.3. There is an out-of-bounds read or a divide-by-zero error for an incorrect userblockcou...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002967)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002967 advisory. A flaw was found in the hugetlbmcopyatomicpte function in mm/hugetlb.c in the Linux kernel before 4.13. A superfluous implicit page unlock for VMSHARED hugetlbfs...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003257)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003257 advisory. An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.17.3. There is an out-of-bounds read or a divide-by-zero error for an incorrect userblockcou...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002645)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002645 advisory. sound/core/timer.c in the Linux kernel before 4.4.1 employs a locking approach that does not consider slave timer instances, which allows local users to cause a deni...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002019)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002019 advisory. The iucvsockrecvmsg function in net/iucv/afiucv.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtai...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002449)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002449 advisory. The kvmiommumappages function in virt/kvm/iommu.c in the Linux kernel through 3.17.2 miscalculates the number of pages during the handling of a mapping failure, whic...

Security update for squid (important)

openSUSE security update: security update for squid ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20027-1 Rating: important References: bsc1250627 bsc1252281 Cross-References: CVE-2025-59362 CVE-2025-62168 CVSS scores: CVE-2025-59362 SUSE : 7.5...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003254)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003254 advisory. The filesystem implementation in the Linux kernel through 4.8.2 preserves the setgid bit during a setxattr call, which allows local users to gain group privileges by...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002753)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002753 advisory. kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service memory corruption or possibly have unspecified other impact ...