Rocky Linux 9 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource Multiple Vulnerabilities (crlsa-2026_29940)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202629940 advisory. firefox: thunderbird: Sandbox escape in the DOM: Workers component CVE-2026-12294 firefox: thunderbird: Information disclosure, sandbox escape in the...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nodejs26: nodejs26-26.10.0-0.3.hum1 aarch64, x8664 nodejs26-bin-26.10.0-0.3.hum1 noarch nodejs26-devel-26.10.0-0.3.hum1 aarch64, x8664 nodejs26-docs-26.10.0-0.3.hum1 noarch...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: openssl3: openssl3-devel-3.5.9-0.1.hum1 aarch64, x8664 openssl3-devel-engine-3.5.9-0.1.hum1 aarch64, x8664 openssl3-libs-3.5.9-0.1.hum1 aarch64, x8664 openssl3-3.5.9-0.1.hum1.src src...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana12.4: grafana12.4-12.4.12-0.2.hum1 aarch64, x8664 grafana12.4-12.4.12-0.2.hum1.src src...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: openssl: openssl-3.5.9-0.1.hum1 aarch64, x8664 openssl-config-fips-3.5.9-0.1.hum1 aarch64, x8664 openssl-devel-3.5.9-0.1.hum1 aarch64, x8664 openssl-devel-engine-3.5.9-0.1.hum1 aarch64, x8664...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nodejs22: nodejs22-22.23.3-2.3.2.2.hum1 aarch64, x8664 nodejs22-bin-22.23.3-2.3.2.2.hum1 noarch nodejs22-devel-22.23.3-2.3.2.2.hum1 aarch64, x8664 nodejs22-docs-22.23.3-2.3.2.2.hum1 noarch...

Important: Red Hat Security Advisory: OpenShift File Integrity Operator bug fix and enhancement update

An updated OpenShift File Integrity Operator image that fixes various bugs and adds new enhancements is now available for the Red Hat OpenShift Enterprise 4 catalog. The OpenShift File Integrity Operator v1.5.0 is now available. See the documentation for bug fix information:...

CVE-2026-43494-PinTheft-PoC

SLEY — PinTheft PoC CVE-2026-43494 概念验证 — uid=1000raken → uid=0root 在 WSL2 6.6.87.2-microsoft-standard-WSL2 上执行 ./sley 后 针对 CVE-2026-43494 （ PinTheft ）的单文件概念验证：一种 Linux 内核本地权限提升漏洞，它利用 RDS 零拷贝引用计数错误 与 iouring 固定缓冲区 链式攻击，覆写 SUID-root 二进制文件的页面缓存。 免责声明： 本仓库仅限 授权的安全研究、教育和防御性测试...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.49 bug fix and security update

Red Hat OpenShift Container Platform release 4.19.49 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...

CVE-2021-30573

CVE-2021-30573-PoC-Google-Chrome 报告的Google Chrome释放后使用漏洞 总漏洞赏金：$6.000 这是以下漏洞的概念验证： Google SecuritySeverity CVE. 高 CVE-2021-30573 https://vulners.com/cve/CVE-2021-30573 Google博客文章： https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop20.html 要求：无，只需在旧版Google Chrome...

CentOS Linux 8.4 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1777614651)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1777614651 advisory. - In the Linux kernel, the following vulnerability has been resolved: virtionet: fix xdprxqinfo bug after suspend/resume The followi...

CentOS Linux 8.5 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1776257772)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1776257772 advisory. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to ImageMagick versions...

AlmaLinux 9.2 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1781080840)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1781080840 advisory. - The go tool pack subcommand usually used only by the compiler as an internal tool with known-good inputs does not sanitize output...

Moderate: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: RDMA/siw: Reject MPA FPDU length underflow before signed receive math CVE-2026-64102 kernel: vmxnet3: fix BUGON in vmxnet3gethdrlen for Geneve packets CVE-2026-68299 kernel: net/liquidio:...

SUSE CVE-2026-97490

In the Linux kernel, the following vulnerability has been resolved: affs: handle setblocksize failures affs uses bufferheads, which don't handle block size PAGESIZE well. Without this, mounting we will hit the BUGONoffset = foliosizefolio; in foliosetbh on the first breadgfp call...

SUSE CVE-2026-97942

In the Linux kernel, the following vulnerability has been resolved: x86/alternatives: Exclude text poking against changepageattr From time to time, the following BUG can be observed in the x86 alternatives patching code 0: kernel BUG at arch/x86/kernel/alternative.c:2576! Oops: invalid opcode: 00...

SUSE CVE-2026-98164

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Check write tracking in all address spaces kvmgfniswritetracked checks only the supplied memslot, but page tracking is per-address-space and shadow pages are shared across all address spaces. With SMM, a GFN can...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: chunkah: chunkah-0.7.0-1.1.hum1 aarch64, x8664 chunkah-0.7.0-1.1.hum1.src src...

Important: Red Hat Security Advisory: OpenShift Virtualization v4.18 Images

Red Hat OpenShift Virtualization release v4.18 is now available with updates to packages and images that fix several bugs and add enhancements. OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift...

Important: Red Hat Security Advisory: Ansible automation portal Red Hat Enterprise Linux Images

Updated images are now available for Red Hat Ansible Automation Platform 2.2, which include new features, bug fixes, and enhancements for the Red Hat Ansible Automation Portal bootable container image. Red Hat Ansible Automation Platform 2.2 delivers the Ansible Automation Portal as a bootable...