Important: Red Hat Security Advisory: General availability of the satellite/iop-remediations-rhel9 container image

A new satellite/iop-remediations-rhel9 container image is now generally available in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running services, an...

Security Bulletin: Vulnerability in Spring Framework affects DB2 Dev Extension (CVE-2026-41841, CVE-2026-41842, CVE-2026-41843, CVE-2026-41844, CVE-2026-41846)

Summary Upgraded spring-webmvc to 6.2.19 to remediate CVE-2026-41841, CVE-2026-41842, CVE-2026-41843, CVE-2026-41844, and CVE-2026-41846 Information Disclosure, DoS, Path Traversal, Open Redirect, XSS — highest CVSS Base Score 7.5 High — PVR0786341. Vulnerability Details CVEID:CVE-2026-41841...

CVE-2026-93296

creationtimestamp| type| source ---|---|--- 2026-09-17 19:08:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/co4remv34wfxg...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: caddy: caddy-2.11.4-0.4.hum1 aarch64, x8664 caddy-2.11.4-0.4.hum1.src src Security Fixes: caddy: CVE-2026-81871...

CVE-2026-78571

creationtimestamp| type| source ---|---|--- 2026-09-17 18:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvqcd3wspx2r...

CVE-2026-54649 punchin-email: Operator inbox (FORWARD_TO) disclosed to correspondents on reply — Cloudflare forward() drops the relay Reply-To

punchin-email is a Cloudflare Email Worker that provides two-way role aliases while relaying mail to a private inbox. Prior to 1.5.0, handleInbound delivers inbound alias mail with message.forward, which silently drops the added Reply-To header intended to route responses through the relay. When ...

CVE-2026-65608

creationtimestamp| type| source ---|---|--- 2026-09-17 18:20:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvqbeptd2c2t 2026-09-17 18:35:22+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-c4wf-2xxc-68qm...

GHSA-VRF4-MX87-P53W

creationtimestamp| type| source ---|---|--- 2026-09-17 18:19:52+00:00| seen| https://bsky.app/profile/standup.thecompound.tech/post/3mvqbeba3dn2c 2026-09-17 19:31:30+00:00| seen| https://gist.github.com/alon710/2a63239df5d54f7447e1b660b93edce2...

FreeRDP: FreeRDP: Out-of-bounds read leads to denial of service and information disclosure

A flaw was found in FreeRDP, an implementation of the Remote Desktop Protocol. A malicious RDP server can exploit an out-of-bounds read vulnerability by sending a malformed planar bitmap or surface update. This causes the client's decoder to read beyond its allocated buffer, which can lead to a...

Steeltoe.Management.Endpoint: HttpExchanges URI masking leaks query-string secrets

Summary Steeltoe's /actuator/httpexchanges endpoint records and displays request URIs after passing them through MaskedUri. The masking only covers the UserInfo portion of the URI inline user:password@host credentials and does not inspect the query string. With IncludeQueryString enabled by...

GHSA-8PHW-XRJ9-CPQP Steeltoe.Management.Endpoint: HttpExchanges URI masking leaks query-string secrets

Summary Steeltoe's /actuator/httpexchanges endpoint records and displays request URIs after passing them through MaskedUri. The masking only covers the UserInfo portion of the URI inline user:password@host credentials and does not inspect the query string. With IncludeQueryString enabled by...

CVE-2026-28326

creationtimestamp| type| source ---|---|--- 2026-09-17 17:52:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/i3uesu6gf6led 2026-09-17 21:18:54+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mvqlef2zbp2x 2026-09-18 20:15:02+00:00| seen|...

CVE-2026-76834

creationtimestamp| type| source ---|---|--- 2026-09-17 17:30:10+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvq6lez25l2f 2026-09-17 18:09:44+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvqas4yzw52r...

CVE-2026-93174

In the Linux kernel, the following vulnerability has been resolved: bpf: Copy per-CPU map value padding in copymapvaluelong In kernel, per-CPU map elements are stored with roundupmap-valuesize, 8 bytes. On UAPI lookup paths, it copies the rounded size for each CPU into a temporary buffer. However...

AZL-102455 CVE-2026-93174 affecting package kernel 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: Copy per-CPU map value padding in copymapvaluelong In kernel, per-CPU map elements are stored with roundupmap-valuesize, 8 bytes. On UAPI lookup paths, it copies the rounded size for each CPU into a temporary buffer. However...

DEBIAN-CVE-2026-93159

In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - fix heap info leak on I2C transfer failure The nonblocking RNG path allocates a workdata structure to track the state of an in-flight asynchronous I2C request. This pointer is stored in rng-priv and later...

CVE-2026-93159

In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - fix heap info leak on I2C transfer failure The nonblocking RNG path allocates a workdata structure to track the state of an in-flight asynchronous I2C request. This pointer is stored in rng-priv and later...

AZL-102479 CVE-2026-93159 affecting package kernel 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - fix heap info leak on I2C transfer failure The nonblocking RNG path allocates a workdata structure to track the state of an in-flight asynchronous I2C request. This pointer is stored in rng-priv and later...

DEBIAN-CVE-2026-93120

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: configfs: fix out-of-bounds read of qwsign osdescqwsignshow passes OSSTRINGQWSIGNLEN as the input length to utf16stoutf8s, but that argument counts UTF-16 code units while OSSTRINGQWSIGNLEN 14 is the byte size of...

CVE-2026-93054

In the Linux kernel, the following vulnerability has been resolved: uio: Fix stale info pointer in failed registration path After deviceadd, the UIO device is visible to userspace and /dev/uioX can be opened. If a later setup step fails, uioregisterdevice unwinds the device but leaves idev-info...