1041187 matches found
curl security, bug fix, and enhancement update
An update is available for curl. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The curl packages provide the libcurl library and the curl utility for downloadi...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: ruby3.4: ruby3.4-3.4.10-31.6.hum1 aarch64, x8664 ruby3.4-bundled-gems-3.4.10-31.6.hum1 aarch64, x8664 ruby3.4-default-gems-3.4.10-31.6.hum1 noarch ruby3.4-devel-3.4.10-31.6.hum1 aarch64, x8664...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: ruby3.3: ruby3.3-3.3.10-23.5.hum1 aarch64, x8664 ruby3.3-bundled-gems-3.3.10-23.5.hum1 aarch64, x8664 ruby3.3-default-gems-3.3.10-23.5.hum1 noarch ruby3.3-devel-3.3.10-23.5.hum1 aarch64, x8664...
SUSE CVE-2026-72211
In the Linux kernel, the following vulnerability has been resolved: ntfs: grow index root value before reparent header update ntfsirreparent moves the resident index root entries into an index block and leaves a small root stub containing the child VCN. That root stub can be larger than the...
php:8.2 security, bug fix, and enhancement update
libzip 1.7.3-1 - update to 1.7.3 php 8.2.33-1 - rebase to 8.2.33 php-pear 1:1.10.14-1 - update PEAR to 1.10.14 for PHP 8.2 RHEL-14705 php-pecl-apcu 5.1.23-1 - update to 5.1.23 for PHP 8.2 RHEL-14705 php-pecl-rrd 2.0.3-1 - update to 2.0.3 php-pecl-xdebug3 3.2.2-2 - drop inetntoa usage using upstre...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001498)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001498 advisory. In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix kernel bug due to missing clearing of checked flag Syzbot reported that in directory...
php:8.3 security, bug fix, and enhancement update
php 8.3.33-1 - rebase to 8.3.33 php-pecl-apcu 5.1.23-1 - update to 5.1.23 for PHP 8.2 RHEL-14699 5.1.21-1 - update to 5.1.21 for PHP 8.1 2070040 php-pecl-redis6 6.1.0-3 - use valkey for tests 6.1.0-2 - ignore 1 ONLINE test 6.1.0-1 - RHEL build 6.1.0-1 - update to 6.1.0 - drop patch merged upstrea...
MINI-7RP8-J8VC-JH8V
Bulletin has no description...
MINI-G5XX-2M88-XP5M
Bulletin has no description...
MINI-82Q4-4F46-CVV7
Bulletin has no description...
MINI-MJ79-PJM3-HM4C
Bulletin has no description...
MINI-5QM6-3JFR-QXPF
Bulletin has no description...
MINI-F7XG-MW33-JVWX
Bulletin has no description...
EUVD-2026-63656
libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, applications that define unusual custom libvips sources and use them to process untrusted uncompressed PPM images can trigger a max/min error in vipssourcereadtomemory in libvips/iofuncs/source.c. The...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: java-25-openjdk: java-25-openjdk-25.0.4.1.1-1.1.hum1 aarch64, x8664 java-25-openjdk-crypto-adapter-25.0.4.1.1-1.1.hum1 aarch64, x8664 java-25-openjdk-crypto-adapter-fastdebug-25.0.4.1.1-1.1.hum1...
cmd/go: golang: Go 'go bug' command: Arbitrary file overwrite via symlink attack
A flaw was found in the 'go bug' command within the Go programming language tools. This command writes to temporary files with predictable names. A local attacker with access to the system's temporary directory could exploit this by creating a symbolic link symlink with one of these predictable...
GHSA-8HW4-7QJR-3WXG Laravel Backpack CRUD: SingleBase64Image accepts any base64 payload behind a `data:image` prefix — SVG-with-script lands on the public disk
Summary SingleBase64Image::uploadFiles — the uploader bound to image-typed fields via withFiles — only verifies that the submitted value starts with the string data:image. The MIME subtype and the base64-decoded bytes are never inspected or validated. A related bug in FileNameGenerator causes the...
CVE-2026-73256 Mongoose: HTTP/1.0 detection off-by-one enables request smuggling via chunked TE
Mongoose is an embedded web server and network library. Prior to 7.22, a remote unauthenticated attacker can exploit an HTTP/1.0 reverse-proxy deployment by sending a request with Transfer-Encoding: chunked and conflicting framing. The httpcb function in src/http.c tests hm.proto.len with an...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: qt6: qt6-filesystem-6.11.2-1.hum1 aarch64, x8664 qt6-rpm-macros-6.11.2-1.hum1 noarch qt6-srpm-macros-6.11.2-1.hum1 noarch qt6-6.11.2-1.hum1.src src...
CVE-2026-74323
A flaw was found in the MediaTek mt7996 Wi-Fi driver within the Linux kernel. When the mt7996txprepareskb routine fails to look up linkconf or linksta, it can lead to a memory leak by not releasing an already allocated transmission token. This issue could potentially impact system stability or...