Moderate: libssh security update

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fixes: libssh: libssh: denial of service via zero advertised channel packet size CVE-2026-59843 libssh: libssh: denial of service via oversized SFTP read length CVE-2026-598...

CVE-2026-84143

Unknown description...

xorg-x11-server-Xwayland security update

24.1.9-4.3 - CVE fix for: CVE-2026-55999, CVE-2026-56000 Resolves: https://redhat.atlassian.net/browse/RHEL-191518 Resolves: https://redhat.atlassian.net/browse/RHEL-191517...

ROS-20260901-73-0042

The vulnerability in Netty is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260901-73-0031

The vulnerability in the incus is related to deficiencies in the authorization process. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected information...

ROS-20260901-73-0022

The vulnerability in python-pyasn1 is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260901-73-0029

The vulnerability in the incus is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

ROS-20260901-73-0001

The vulnerability of the SoapServer class in the PHP programming language is related to the use of memory after it is freed during the processing of the SOAPPERSISTENCESESSION parameter. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause service...

ROS-20260901-73-0036

The vulnerability of the RedisArrayAggregator component in the framework for developing network applications, servers, and client protocols based on Netty is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to compromise the accessibilit...

ROS-20260901-73-0045

The vulnerability in Netty is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260901-73-0010

The vulnerability of the PDO driver for the Firebird database management system, which is written in the PHP programming language, relates to the lack of protective measures taken against the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute SQL injections...

ROS-20260901-73-0012

The vulnerability of the PDO driver for the Firebird database management system, which is written in the PHP programming language, relates to the lack of protective measures taken against the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute SQL injections...

ROS-20260901-73-0002

The vulnerability of the SoapServer class in the PHP programming language is related to the use of memory after it is freed during the processing of the SOAPPERSISTENCESESSION parameter. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause service...

ROS-20260901-73-0021

The vulnerability of the Microsoft .NET software platform is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

Moderate: wget security, bug fix, and enhancement update

The wget packages provide the GNU Wget file retrieval utility for HTTP, HTTPS, and FTP protocols. Security Fixes: wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption CVE-2026-58471 wget: GNU Wget: Arbitrary code execution or denial of service via crafted...

wget security, bug fix, and enhancement update

1.24.5-8 - Resolves: RHEL-220498 - async unsafe code in signal handler context 1.24.5-7 - Fix CVE-2026-58471: buffer overflow in convertfname Resolves: RHEL-194518 1.24.5-6 - Fix integer and buffer overflow in htmlquotestring Resolves: RHEL-210625...

wget security, bug fix, and enhancement update

1.21.1-11 - Resolves: RHEL-220497 - async unsafe code in signal handler context 1.21.1-10 - Fix CVE-2026-58471: buffer overflow in convertfname - Resolves: RHEL-194521 1.21.1-9 - Resolves: RHEL-210636 - Fix integer+buffer overflow in htmlquotestring...

libxml2 security update

2.9.13-14.4 - Fix CVE-2026-11979 RHEL-215568 2.9.13-14.3 - Fix CVE-2026-6653 RHEL-215619...

py-strawberry-graphql -- Incorrect authorization

Patrick Arminio reports: "PermissionExtension.resolve" evaluates the return value of "haspermission" for truthiness on the synchronous path. "supportssync" only classifies a permission as asynchronous when "haspermission" is declared with "async def" via "inspect.iscoroutinefunction", so a plain...

tar security, bug fix, and enhancement update

2:1.34-13 - Backport upstream patches for CVE-2026-18477, fixes a bug where incremental restore with cyclic renames between backups may create a temporary directory at an archive-controlled path outside the extraction tree. The fix for CVE-2025-45582 already prevents exploiting this problem, so i...