RHSA-2026:54751 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

CVE-2026-62886

A flaw was found in .NET. This vulnerability, caused by an integer overflow or wraparound, allows an unauthorized local attacker to elevate their privileges on the system. This could grant the attacker higher access than intended, potentially leading to further system compromise. Mitigation There...

CLSA-2026-1788421934 TuxCare security update for org.springframework.data (4 CVEs)

TuxCare rebuilt 4 org.springframework.data packages to address 4 CVEs. Fixed in 3.3.13-tuxcare.4...

CLSA-2026-1788418779 TuxCare security update for io.netty (1 CVE)

TuxCare rebuilt 43 io.netty packages to address 1 CVE. Fixed in 4.1.63.Final-tuxcare.6...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.57 security and extras update

Red Hat OpenShift Container Platform release 4.17.57 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a security impact of...

PT-2026-85211

Name of the Vulnerable Software and Affected Versions Kibana versions 8.0.0 through 8.19.20 Kibana versions 9.0.0 through 9.4.5 Kibana versions 9.5.0 through 9.5.2 Description Incorrect authorization in Kibana allows for privilege escalation through input data manipulation. The system fails to...

AlmaLinux 10 : golang-github-openprinting-ipp-usb (ALSA-2026:62631)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:62631 advisory. mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header CVE-2026-42504 encoding/asn1: golang: Go encoding/asn1: Denial of Servi...

RHCOS 4 : OpenShift Container Platform 4.17.57 (RHSA-2026:60018)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:60018 advisory. - crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption CVE-2025-68121 - net/url: Incorrect parsin...

RockyLinux 9 : grafana (RLSA-2026:62406)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:62406 advisory. net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 net/mail: golang: Go net/mail: Denial of Service via...

GHSA-M2JM-F3W6-VG8C vulnerabilities

Vulnerabilities for packages: elasticsearch...

GHSA-FQJ3-H9PC-443H vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, opensearch-dashboards-fips, gitlab-rails-ce-fips, nextcloud-server, librechat, semaphore, lerna, langfuse-fips, redisinsight, awx, wazuh-dashboard, gitlab-rails-ce, wazuh-dashboard-fips, prism, kibana, kubeflow-centraldashboard, opensearch-dashboards,...

CVE-2026-67317 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, opensearch-dashboards-fips, gitlab-rails-ce-fips, nextcloud-server, librechat, semaphore, lerna, langfuse-fips, redisinsight, awx, wazuh-dashboard, gitlab-rails-ce, wazuh-dashboard-fips, prism, kibana, kubeflow-centraldashboard, opensearch-dashboards,...

GHSA-68JP-44VC-2X5H vulnerabilities

Vulnerabilities for packages: librechat, wazuh-dashboard, prism, opensearch-dashboards, jitsucom-jitsu, gitlab-rails-ce-fips, nextcloud-server, lerna, awx, gitlab-rails-ce, langfuse, azurite, kubeflow-centraldashboard, redisinsight, opensearch-dashboards-fips, semaphore, wazuh-dashboard-fips,...

CVE-2026-18401 vulnerabilities

Vulnerabilities for packages: camunda, confluent-kafka-jre-bcfips, camunda-zeebe, spark-kubernetes-operator, dependency-track, management-api-for-apache-cassandra-4.1, zipkin, apache-activemq-fips, jenkins, kayenta, apache-tika, knative-kafka-broker-fips, cassandra-fips, tez, ruby3.3-jrjackson,...

CVE-2026-67315 vulnerabilities

Vulnerabilities for packages: lerna, prism, nextcloud-server, kubeflow-centraldashboard, jitsucom-jitsu, langfuse, opensearch-dashboards...

GHSA-39J5-W47M-2GMV vulnerabilities

Vulnerabilities for packages: lerna, prism, nextcloud-server, kubeflow-centraldashboard, jitsucom-jitsu, langfuse, opensearch-dashboards...

CVE-2026-67318 vulnerabilities

Vulnerabilities for packages: lerna, prism, nextcloud-server, kubeflow-centraldashboard, jitsucom-jitsu, langfuse, opensearch-dashboards...

CVE-2026-67320 vulnerabilities

Vulnerabilities for packages: lerna, prism, nextcloud-server, kubeflow-centraldashboard, jitsucom-jitsu, langfuse, opensearch-dashboards...

GHSA-FQJ3-H9PC-443H vulnerabilities

Vulnerabilities for packages: lerna, prism, nextcloud-server, kubeflow-centraldashboard, jitsucom-jitsu, langfuse, opensearch-dashboards...

CVE-2026-18401 vulnerabilities

Vulnerabilities for packages: ruby4.0-jrjackson, dependency-track, cassandra, infinispan, apache-nifi, jenkins, zookeeper, zipkin, kserve-modelmesh, solr, logstash, trino, opensearch, airflow, nextflow, scala, akhq, apache-tika, celeborn, cassandra-reaper, cass-config-builder, druid,...