ALSA-2026:38504 Important: container-tools:rhel8 security update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME CVE-2026-33811 golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial o...

AlmaLinux 9 : podman (ALSA-2026:37123)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:37123 advisory. golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate CVE-2026-39835 golang.org/x/crypto/ssh:...

CVE-2026-40007

creationtimestamp| type| source ---|---|--- 2026-07-10 12:15:43+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-40007 2026-07-10 13:15:20+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqca66s5mz2k 2026-07-10 21:53:24+00:00| seen|...

CVE-2026-15270

creationtimestamp| type| source ---|---|--- 2026-07-10 00:15:12+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-15270...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: croc, hubble, dynamic-localpv-provisioner, lvm-driver, kyverno, headlamp, jaeger-operator, witness, azcopy, crossplane-provider-azure-authorization, ko, cloudprober, tigera-operator, harbor-registry, incert, mongo-tools, buildkitd, chisel, nri-haproxy, rancher-helm,...

CVE-2026-35188

A flaw was found in OpenSSL. A malicious server can exploit the TLS Online Certificate Status Protocol OCSP stapling feature by sending a specially crafted response. This can trigger a double-free vulnerability in the client's certificate verification process, potentially leading to a Denial of...

CVE-2026-56289

creationtimestamp| type| source ---|---|--- 2026-07-09 12:15:07+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-56288 2026-07-09 12:37:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7nkxwcyq27...

CVE-2026-50644

creationtimestamp| type| source ---|---|--- 2026-07-09 12:05:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7lrrsktt2i 2026-07-09 12:15:09+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-50644...

CVE-2026-57024

creationtimestamp| type| source ---|---|--- 2026-07-09 04:47:18+00:00| seen| https://www.hkcert.org/security-bulletin/juniper-junos-os-multiple-vulnerabilities20260709...

CVE-2026-15127

creationtimestamp| type| source ---|---|--- 2026-07-09 04:45:54+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260709...

CVE-2026-15122

creationtimestamp| type| source ---|---|--- 2026-07-09 04:45:42+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260709...

CVE-2026-46111

creationtimestamp| type| source ---|---|--- 2026-07-09 01:19:29+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260702...

CVE-2026-43361

creationtimestamp| type| source ---|---|--- 2026-07-09 01:18:10+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260702...

CVE-2026-43360

creationtimestamp| type| source ---|---|--- 2026-07-09 01:18:08+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260702...

CVE-2026-59805

creationtimestamp| type| source ---|---|--- 2026-07-09 00:15:09+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-59805...

CVE-2026-59806

creationtimestamp| type| source ---|---|--- 2026-07-09 00:15:07+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-59806...

PYSEC-2026-1602 OpenStack magnum vulnerable to time-of-check to time-of-use (TOCTOU) attack

An issue in OpenStack magnum yoga-eom version allows a remote attacker to execute arbitrary code via the certmanager.py. component...

CERTFR-2026-ACT-029

creationtimestamp| type| source ---|---|--- 2026-07-06 13:55:41+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mpyakobmvx2m 2026-07-06 13:55:47+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116873372689629084 2026-07-06 15:54:46+00:00| seen|...

CVE-2026-57993

creationtimestamp| type| source ---|---|--- 2026-07-06 07:49:32+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260706 2026-07-14 22:02:52+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15...

CVE-2026-45488

creationtimestamp| type| source ---|---|--- 2026-07-06 07:48:45+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260706 2026-07-14 22:05:04+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15...