CLSA-2026-1778254552 httpd: Fix of 8 CVEs

CVE-2026-24072: modrewrite/modsetenvif: use APEXPRFLAGRESTRICTED in htaccess to prevent reading server-side files via apexpr from .htaccess - CVE-2026-29169: moddavlock: NULL pointer dereference in davgenericrefreshlocks use dpscan instead of dp - CVE-2026-33006: modauthdigest: timing attack —...

CVE-2026-41583 ZEBRA: Consensus Divergence in Transparent Sighash Hash-Type Handling

ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.3.1 and prior to zebra-script version 5.0.2, after a refactoring, Zebra failed to validate a consensus rule that restricted the possible values of sighash hash types for V5 transactions which were enabled in the NU5 network...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.89 bug fix and security update

Red Hat OpenShift Container Platform release 4.12.89 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...

Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues The following security issues were fixed: CVE-2025-38234: sched/rt: Fix race in pushrttask bsc1246057. CVE-2026-23243: RDMA/umad: Reject negative datalen in ibumadwrite bsc1259797. Special Instructions and Notes:...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.89 bug fix and security update

Red Hat OpenShift Container Platform release 4.12.89 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...

[slackware-security] php

New php packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: extra/php82/php82-8.2.31-i586-1slack15.0.txz: Upgraded. This update fixes security issues: FPM: Fixed XSS within status endpoint. MBString: Fixed Null...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-firefox-140.10.2esr-i686-1slack15.0.txz: Upgraded. This update contains security fixes and improvements. For more...

CVE-2026-42277 Onyx: IDOR in /chat/file/{file_id} allows any authenticated user to download other users files

Onyx is an open-source AI platform. Prior to versions 3.0.9, 3.1.6, and 3.2.6, the GET /chat/file/fileid endpoint allows any authenticated user to download any other user's uploaded files by providing the file UUID. The endpoint verifies the caller is authenticated but never checks that the file...

OPENSUSE-SU-2026:10728-1 java-25-openj9-25.0.3.0-1.1 on GA media

These are all security issues fixed in the java-25-openj9-25.0.3.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10726-1 java-1_8_0-openj9-1.8.0.492-1.1 on GA media

These are all security issues fixed in the java-180-openj9-1.8.0.492-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10736-1 libblkid-devel-2.42-1.1 on GA media

These are all security issues fixed in the libblkid-devel-2.42-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10727-1 java-21-openj9-21.0.11.0-1.1 on GA media

These are all security issues fixed in the java-21-openj9-21.0.11.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10725-1 java-17-openj9-17.0.19.0-1.1 on GA media

These are all security issues fixed in the java-17-openj9-17.0.19.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10724-1 java-11-openj9-11.0.31.0-1.1 on GA media

These are all security issues fixed in the java-11-openj9-11.0.31.0-1.1 package on the GA media of openSUSE Tumbleweed...

FreeBSD : chromium -- security fixes (da4d7162-4aa3-11f1-b189-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the da4d7162-4aa3-11f1-b189-a8a1599412c6 advisory. Chrome Releases reports: This update includes 127 security fixes: Critical: High: Medium: Low:...

OPENSUSE-SU-2026:10732-1 libmodsecurity3-3.0.15-1.1 on GA media

These are all security issues fixed in the libmodsecurity3-3.0.15-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10731-1 mcphost-0.34.0-1.1 on GA media

These are all security issues fixed in the mcphost-0.34.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10735-1 tor-0.4.9.8-1.1 on GA media

These are all security issues fixed in the tor-0.4.9.8-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10730-1 libsndfile-devel-1.2.2-5.1 on GA media

These are all security issues fixed in the libsndfile-devel-1.2.2-5.1 package on the GA media of openSUSE Tumbleweed...

Security update for Mesa (moderate)

openSUSE security update: security update for mesa ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20688-1 Rating: moderate References: bsc1261911 bsc1261998 Cross-References: CVE-2026-40393 Affected Products: openSUSE Leap 16.0...