Security update for rust-keylime

This update for rust-keylime fixes the following issues Update to version 0.2.9+49 Update openssl to 0.10.81 CVE-2026-41676: openssl: Deriver:derive and PkeyCtxRef:derive can overflow short buffers on OpenSSL 1.1.1 bsc1270174. CVE-2026-41677: openssl: out-of-bounds read in PEM password callback...

SUSE CVE-2026-54786

Wasmtime is a runtime for WebAssembly. All versions prior to 24.0.10; versions 25.0.0 through those before 36.0.11; versions 37.0.0 through those before 44.0.3; and versions 45.0.0 and 45.0.1 contain a native implementation of WASIp1 which suffers from a leak in the fdrenumber function where the...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: ruby4.0: ruby4.0-4.0.5-35.hum1 aarch64, x8664 ruby4.0-bundled-gems-4.0.5-35.hum1 aarch64, x8664 ruby4.0-default-gems-4.0.5-35.hum1 noarch ruby4.0-devel-4.0.5-35.hum1 aarch64, x8664...

PT-2026-56997

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2026.6.0 Discourse versions prior to 2026.5.1 Discourse versions prior to 2026.4.2 Discourse versions prior to 2026.1.5 Description Restricted tag and tag-group names attached to publicly readable categories as...

OPENSUSE-SU-2026:11240-1 python313-websockets-16.0-2.1 on GA media

These are all security issues fixed in the python313-websockets-16.0-2.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-56993

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2026.6.0 Discourse versions prior to 2026.5.1 Discourse versions prior to 2026.4.2 Discourse versions prior to 2026.1.5 Description The signup flow allows newly registered users to set the primary group id variable...

OPENSUSE-SU-2026:11244-1 xorg-x11-server-21.1.21-8.1 on GA media

These are all security issues fixed in the xorg-x11-server-21.1.21-8.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11228-1 ImageMagick-7.1.2.27-1.1 on GA media

These are all security issues fixed in the ImageMagick-7.1.2.27-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-56949

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeMove Billey billey allows PHP Local File Inclusion.This issue affects Billey: from n/a through = 2.1.8...

PT-2026-56935

Name of the Vulnerable Software and Affected Versions Pimcore versions prior to 2025.4.6 Pimcore versions prior to 2026.1.6 Description The Studio API class definition creation endpoint 'POST /pimcore-studio/api/class/definition/configuration-view/detail/create' is guarded by the objects permissi...

PT-2026-56945

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in merkulove Speaker speaker allows Stored XSS.This issue affects Speaker: from n/a through = 4.1.13...

nginx:1.26 security, bug fix, and enhancement update

1.26.3-9.0.1.2 - Require oracle-indexhtml 2:1.26.3-12 - Resolves: RHEL-191774 - nginx: 'HTTP/2 bomb' nginx fix breaks module ABI causing crashes 2:1.26.3-11 - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack 2:1.26.3-10 - nginx: code execution and...

PT-2026-56950

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeMove Brook brook allows PHP Local File Inclusion.This issue affects Brook: from n/a through = 2.9.0...

OPENSUSE-SU-2026:11233-1 libXfont2-2-2.0.7-2.1 on GA media

These are all security issues fixed in the libXfont2-2-2.0.7-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11239-1 python313-tornado6-6.5.7-2.1 on GA media

These are all security issues fixed in the python313-tornado6-6.5.7-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11235-1 python313-Django4-4.2.30-4.1 on GA media

These are all security issues fixed in the python313-Django4-4.2.30-4.1 package on the GA media of openSUSE Tumbleweed...

gstreamer1-plugins-good security update

1.22.12-7.1 - Rebase rhel-9.8.0 from 1.18.4 to 1.22.12 to resync with rhel-9.7.0/c9s this branch had regressed to a stale pre-1.22.12 base Resolves: RHEL-156269, RHEL-156270 - Fix CVE-2026-53705: integer overflow in wavpack decoder, re-applied on top of the correct 1.22.12 base Resolves:...

OPENSUSE-SU-2026:11231-1 flannel-0.28.7-1.1 on GA media

These are all security issues fixed in the flannel-0.28.7-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-57000

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2026.6.0 Discourse versions prior to 2026.5.1 Discourse versions prior to 2026.4.2 Discourse versions prior to 2026.1.5 Description A stored cross-site scripting issue exists where a malicious second factor name on ...

PT-2026-57243

Name of the Vulnerable Software and Affected Versions rclone versions prior to 1.74.4 Description When using the serve restic --private-repos command, the software enforces authorization based on the routed user path segment but constructs the backend object key using the raw, uncleaned URL path...