Important: Red Hat Security Advisory: Release of containers for RHOSO 18.0.18 security update

Red Hat OpenStack Services on OpenShift RHOSO 18.0.18 containers are now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

ROOT-OS-DEBIAN-13-CVE-2026-41989 CVE-2026-41989 in rootio-libgcrypt20 - Patched by Root

Root has patched CVE-2026-41989 in the rootio-libgcrypt20 package for Root:Debian:13. Multiple fixed versions available...

RHSA-2026:11403 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

CLSA-2026-1777453233 Fix CVE(s): CVE-2026-21925, CVE-2026-21932, CVE-2026-21933, CVE-2026-21945

OpenJDK 11.0.30 release, build 7. - CVE-2026-21925: Improve JMX connections - CVE-2026-21932: Enhance handling of URIs AWT/JavaFX - CVE-2026-21933: Improve HttpServer request handling - CVE-2026-21945: Enhance certificate checking - Release notes:...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.29 bug fix and security update

Red Hat OpenShift Container Platform release 4.19.29 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...

ROOT-OS-DEBIAN-12-CVE-2026-25967 CVE-2026-25967 in rootio-imagemagick - Patched by Root

Root has patched CVE-2026-25967 in the rootio-imagemagick package for Root:Debian:12. Multiple fixed versions available...

CLEANSTART-2026-ST55360 Security fixes for ghsa-72hv-8253-57qq, ghsa-qqpg-mvqg-649v applied in versions: 3.9.4-r0, 3.9.4-r6

Multiple security vulnerabilities affect the apache-zookeeper package. These issues are resolved in later releases. See references for individual vulnerability details...

ALSA-2026:11514 Important: grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fixes: golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root...

PT-2026-37378

Name of the Vulnerable Software and Affected Versions gnutls versions prior to 3.8.13-1.1 Description A flaw exists where permitted name constraints are incorrectly ignored when previous Certificate Authorities CAs only have excluded name constraints. A remote attacker can exploit this to bypass...

OPENSUSE-SU-2026:10658-1 python311-pypdf-6.10.2-2.1 on GA media

These are all security issues fixed in the python311-pypdf-6.10.2-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10653-1 arianna-26.04.0-2.1 on GA media

These are all security issues fixed in the arianna-26.04.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10660-1 xen-4.21.1_04-1.1 on GA media

These are all security issues fixed in the xen-4.21.104-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10657-1 krb5-appl-clients-1.0.3-6.1 on GA media

These are all security issues fixed in the krb5-appl-clients-1.0.3-6.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10656-1 java-1_8_0-openjdk-1.8.0.492-1.1 on GA media

These are all security issues fixed in the java-180-openjdk-1.8.0.492-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-37433

Name of the Vulnerable Software and Affected Versions gnutls versions prior to 3.8.13-1.1 Description No detailed information was provided regarding the nature of the security issues fixed in this package. Recommendations Update to version 3.8.13-1.1...

Fedora 44 : bind9-next (2026-01c20fe8ca)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-01c20fe8ca advisory. Update to 9.21.20 rhbz2440560 Security Fixes: - Fix unbounded NSEC3 iterations when validating referrals to unsigned delegations. CVE-2026-1519 - Fi...

Important: Red Hat Security Advisory: VolSync v0.14 security fixes and container updates

VolSync v0.14 General Availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Update to version 2.52.1. Security issues fixed: CVE-2026-20643: processing maliciously crafted web content may bypass Same Origin Policy bsc1261172. CVE-2026-20664: processing maliciously crafted web content may lead to an unexpected proces...

CVE-2026-7320 Information disclosure due to incorrect boundary conditions in the Audio/Video component

Information disclosure due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox ESR 115.35.1, Thunderbird 150.0.1, and Thunderbird 140.10.1...

CVE-2026-40980

In Spring AI, a memory exhaustion vulnerability exists in the ForkPDFLayoutTextStripper when processing a malicious PDF. Affected versions are Spring AI 1.0.0–1.0.5 (fixed in 1.0.6) and 1.1.0–1.1.4 (fixed in 1.1.5). The CVSS data indicates availability impact is High, with network attack and low ...