CLSA-2026-1789379188 TuxCare security update for org.apache.httpcomponents (1 CVE)

TuxCare rebuilt 4 org.apache.httpcomponents packages to address 1 CVE. Fixed in 4.0.1-tuxcare.1...

CLSA-2026-1789377744 TuxCare security update for cryptography (1 CVE)

TuxCare rebuilt cryptography to address 1 CVE. Fixed in 42.0.8.post3+tuxcare...

CLSA-2026-1789377631 TuxCare security update for cryptography (1 CVE)

TuxCare rebuilt cryptography to address 1 CVE. Fixed in 43.0.1.post2+tuxcare...

CLSA-2026-1789376980 TuxCare security update for 13 packages (1 CVE)

TuxCare rebuilt 13 packages to address 1 CVE. Fixed in 6.0.17.Final-tuxcare.1...

Important: Red Hat Security Advisory: RHEL AI 3.3 RPM runtime CVE fix - ffmpeg

AIPCC Security Alerts identified CVEs in the 3.5 release of base-images. The CVEs are listed with a severity level of "Important" or higher. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application platform...

CLSA-2026-1789376303 TuxCare security update for 4 packages (1 CVE)

TuxCare rebuilt 4 packages to address 1 CVE. Fixed in 3.2.11-tuxcare.5...

CLSA-2026-1789376231 TuxCare security update for fast-xml-parser (1 CVE)

TuxCare rebuilt fast-xml-parser to address 1 CVE. Fixed in 4.5.1-tuxcare.2...

CLSA-2026-1789374817 TuxCare security update for commons-io:commons-io (1 CVE)

TuxCare rebuilt commons-io:commons-io to address 1 CVE. Fixed in 2.9.0-tuxcare.1...

CLSA-2026-1789374715 TuxCare security update for markdown-it (1 CVE)

TuxCare rebuilt markdown-it to address 1 CVE. Fixed in 4.4.0-tuxcare.1...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: gcc13: gcc13-13.5.0-0.1.hum1 aarch64, x8664 gcc13-c++-13.5.0-0.1.hum1 aarch64, x8664 gcc13-gfortran-13.5.0-0.1.hum1 aarch64, x8664 gcc13-plugin-annobin-13.5.0-0.1.hum1 aarch64, x8664...

CLSA-2026-1789372046 TuxCare security update for com.rabbitmq:amqp-client (1 CVE)

TuxCare rebuilt com.rabbitmq:amqp-client to address 1 CVE. Fixed in 5.30.0-tuxcare.1...

CLSA-2026-1789371869 TuxCare security update for com.mchange:c3p0 (2 CVEs)

TuxCare rebuilt com.mchange:c3p0 to address 2 CVEs. Fixed in 0.9.5.2-tuxcare.1...

CLSA-2026-1789371248 TuxCare security update for org.apache.commons:commons-configuration2 (1 CVE)

TuxCare rebuilt org.apache.commons:commons-configuration2 to address 1 CVE. Fixed in 2.9.0-tuxcare.1...

CLSA-2026-1789369685 TuxCare security update for org.springframework.graphql (1 CVE)

TuxCare rebuilt 2 org.springframework.graphql packages to address 1 CVE. Fixed in 1.2.9-tuxcare.6...

CVE-2023-32803

The ca-certificates package before ca-certificates-2021.2.50-72 for Amazon Linux 2 AL2 does not properly remove certain TrustCor root certificates from the root store. NOTE: this issue exists because of an incorrect fix for CVE-2022-23491...

httpd: incomplete fix for CVE-2023-38709

A flaw was found in httpd. The response headers are not sanitized before an HTTP response is sent when a malicious backend can insert a Content-Type, Content-Encoding, or some other headers. These issues lead to HTTP response splitting. This CVE provides a "complete" fix for CVE-2023-38709...

CLSA-2026-1789362482 TuxCare security update for commons-collections:commons-collections (1 CVE)

TuxCare rebuilt commons-collections:commons-collections to address 1 CVE. Fixed in 3.1-tuxcare.1...

Apache Tomcat: Apache Tomcat: Improper Input Validation vulnerability due to incomplete fix

A flaw was found in Apache Tomcat. This improper input validation vulnerability stems from an incomplete fix for a previous security issue CVE-2025-66614. This flaw may allow an attacker to bypass security controls or cause unexpected behavior within the application...

Apache Tomcat: Apache Tomcat: Improper Input Validation vulnerability due to incomplete fix

A flaw was found in Apache Tomcat. This improper input validation vulnerability stems from an incomplete fix for a previous security issue CVE-2025-66614. This flaw may allow an attacker to bypass security controls or cause unexpected behavior within the application...

openssl security, bug fix, and enhancement update

3.5.8-1.0.1 - Replace upstream references Orabug: 34340177 - Update FIPS provider name Orabug: 35824276 1:3.5.8-1 - Rebase to OpenSSL 3.5.8 Resolves: RHEL-242944 Resolves: RHEL-246254 Resolves: RHEL-246266 Resolves: RHEL-246306 Resolves: RHEL-246437 Resolves: RHEL-246441 Resolves: RHEL-246445...