RHSA-2026:40938 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:39023 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:36017 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:36016 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:23423 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: apr-util: apr-util-1.6.5-1.hum1 aarch64, x8664 apr-util-devel-1.6.5-1.hum1 aarch64, x8664 apr-util-ldap-1.6.5-1.hum1 aarch64, x8664 apr-util-lmdb-1.6.5-1.hum1 aarch64, x8664...

OPENSUSE-SU-2026:11574-1 hauler-2.0.3-1.1 on GA media

These are all security issues fixed in the hauler-2.0.3-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-53509

@aborruso/ckan-mcp-server (an MCP server for querying CKAN open data portals) is vulnerable to SSRF prior to version 0.4.106 . The validateServerUrl hostname check in src/utils/http.ts only blocked the literal string localhost, but hostname aliases such as ip6-localhost and ip6-loopback (defined ...

CVE-2026-53509 @aborruso/ckan-mcp-server: SSRF via base_url allows access to internal networks (Potential fix bypass of CVE-2026-33060)

CKAN MCP Server is a tool for querying CKAN open data portals. A known vulnerability CVE-2026-33060 indicated tools including ckanpackagesearch and sparqlquery that accept a baseurl parameter had the risk of making HTTP requests to arbitrary endpoints without restriction. A fix was applied to...

ROOT-APP-PYPI-CVE-2026-34525 CVE-2026-34525 in aiohttp - Patched by Root

Root has patched CVE-2026-34525 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-69244 CVE-2026-69244 in aiohttp - Patched by Root

Root has patched CVE-2026-69244 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-32739 CVE-2026-32739 in libheif - Patched by Root

Root has patched CVE-2026-32739 in the libheif package for Root:Debian:11. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-6402 CVE-2026-6402 in webpack-dev-server - Patched by Root

Root has patched CVE-2026-6402 in the webpack-dev-server package for Root:npm. Multiple fixed versions available...

RHSA-2026:57590 Red Hat Security Advisory: rh-podman-desktop security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2026:57574 Red Hat Security Advisory: php:8.2 security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2026:57462 Red Hat Security Advisory: curl security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2026:57539 Red Hat Security Advisory: php:8.3 security, bug fix, and enhancement update

Bulletin has no description...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: java-21-openjdk: java-21-openjdk-21.0.12.1.1-1.0.hum1 aarch64, x8664 java-21-openjdk-demo-21.0.12.1.1-1.0.hum1 aarch64, x8664 java-21-openjdk-demo-fastdebug-21.0.12.1.1-1.0.hum1 aarch64, x8664...

ROOT-APP-PYPI-CVE-2026-54276 CVE-2026-54276 in aiohttp - Patched by Root

Root has patched CVE-2026-54276 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

curl security, bug fix, and enhancement update

An update is available for curl. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The curl packages provide the libcurl library and the curl utility for downloadi...