Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: tar: tar-1.35-9.2.hum1 aarch64, x8664 tar-1.35-9.2.hum1.src src...

CVE-2026-71250

Firefly III's webhook URL validator IsValidWebhookUrl.php filters most private/reserved IPv4 ranges but contains an explicit early-return that allows any resolved address in 127.0.0.0/8, permitting an authenticated user with webhooks enabled, which is off by default to configure a webhook targeti...

RHSA-2026:50336 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update

Bulletin has no description...

RHSA-2026:50319 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

Bulletin has no description...

RHSA-2026:50318 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.7 Product Security and Bug Fix Update

Bulletin has no description...

RHSA-2026:50281 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:50142 Red Hat Security Advisory: sg3_utils security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2026:50141 Red Hat Security Advisory: sg3_utils security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2026:49857 Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2026:49838 Red Hat Security Advisory: osbuild-composer security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2026:45940 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:2711 Red Hat Security Advisory: Red Hat Ceph Storage 8.1 security and bug fix update

Bulletin has no description...

CVE-2026-71202

The raster Rust crate's crop function src/editor.rs clamps the crop width/height against source dimensions but only clamps the offsetx/offsety parameters against 0, never against the source width/height...

UBUNTU-CVE-2026-64576

In the Linux kernel, the following vulnerability has been resolved: nexthop: initialize extack in nhresbucketmigrate nhresbucketmigrate passes an uninitialized netlinkextack to callnexthopresbucketnotifiers. When nhnotifierresbucketinfoinit fails e.g. the kzalloc returns -ENOMEM, the error is...

UBUNTU-CVE-2026-64567

In the Linux kernel, the following vulnerability has been resolved: btrfs: reject free space cache with more entries than pages When loading a v1 free space cache, loadfreespacecache takes numentries and numbitmaps straight from the on-disk btrfsfreespaceheader. That header is stored in the...

CVE-2026-64568

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix unsolbcastproberesp double free on alloc failure ieee80211setunsolbcastproberesp calls kfreercu on the old template before allocating the replacement. If the kzalloc then fails, it returns -ENOMEM while...

Critical: Red Hat Security Advisory: OpenShift Container Platform 4.19.41 bug fix and security update

Red Hat OpenShift Container Platform release 4.19.41 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...

Critical: Red Hat Security Advisory: OpenShift Container Platform 4.18.51 bug fix and security update

Red Hat OpenShift Container Platform release 4.18.51 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a...

CVE-2026-71204 changedetection.io - Omitted Checkbox in /settings Save Silently Disables API Key Enforcement

changedetection.io's /settings save handler builds an update dict from form.data'application' and blind-merges it into the stored application settings via .update...

[SECURITY] [DSA 6411-1] aom security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6411-1 [email protected] https://www.debian.org/security/ Aron Xu August 05, 2026 https://www.debian.org/security/faq -...