Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: valkey: valkey-9.0.4-0.1.hum1 aarch64, x8664 valkey-compat-redis-9.0.4-0.1.hum1 noarch valkey-compat-redis-devel-9.0.4-0.1.hum1 noarch valkey-devel-9.0.4-0.1.hum1 aarch64, x8664...

GHSA-VF2M-468P-8V99 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, opensearch-dashboards, awx, gitlab-rails-ce-fips, gitlab-rails-ce, redisinsight, kubeflow-centraldashboard, langfuse, nextcloud-server, opensearch-dashboards-fips, jitsucom-jitsu, lerna, prism, saf, kibana, wazuh-dashboard, langfuse-fips,...

MGASA-2026-0109 Updated virtualbox packages fix security vulnerabilities

Some security vulnerabilities are fixed by this update; please see the links. If you will not update to kernel 6.6.137 flavors, please think in use dkms-virtualbox package instead of virtualbox-kernel as those packages have not been updated for previous kernels...

CVE-2026-23870

A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to server crashes, out-of-memory exceptions or excessive CPU usage; affecting the following packages: react-server-dom-webpack, react-server-dom-parcel,...

CVE-2026-23870

A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to server crashes, out-of-memory exceptions or excessive CPU usage; affecting the following packages: react-server-dom-webpack, react-server-dom-parcel,...

CVE-2026-23870

CVE-2026-23870 is a denial-of-service vulnerability in react-server-dom-webpack, react-server-dom-parcel, and react-server-dom-turbopack. It affects versions 19.0.0–19.0.5, 19.1.0–19.1.6, and 19.2.0–19.2.5. Triggered by specially crafted HTTP requests to server function endpoints, it can cause se...

GHSA-P4R4-XVRQ-GVMC vulnerabilities

Vulnerabilities for packages: grafana...

CVE-2026-41491 vulnerabilities

Vulnerabilities for packages: dapr...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: cloudprober, openfga, kots, sftpgo-plugin-eventsearch, sqlexporter, gitaly, opentelemetry-collector-contrib, cerbos, steampipe, step-ca, juicefs, jitsucom-bulker, step-issuer, kubeflow-pipelines, grafana-alloy, caddy, pgtimetable, telegraf, openbao, cloudnative-pg,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: gitlab-runner, src-fingerprint, flux, kots, trivy-operator, kaniko, scorecard, gitaly, cerbos, steampipe, kargo, zarf, kyverno, teleport, gomplate, crossplane, apko, grafana-alloy, pulumi-kubernetes-operator, pulumi-language-yaml, skaffold, guac, zot, gitsign, tfsec,...

OceanLotus suspected of using PyPI to deliver ZiChatBot malware

Introduction Through our daily threat hunting, we noticed that, beginning in July 2025, a series of malicious wheel packages were uploaded to PyPI the Python Package Index. We shared this information with the public security community, and the malware was removed from the repository. We submitted...

RHSA-2026:8291 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:13722 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Bulletin has no description...

RHSA-2026:13719 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Bulletin has no description...

Linux Distros Unpatched Vulnerability : CVE-2025-54502

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect use of boot service in the AMD Platform Configuration Blob APCB SMM driver could allow a privileged attacker with local access Ring 0 to achieve...

Moderate Photon OS Security Update - PHSA-2026-4.0-1011

Updates of 'mysql' packages of Photon OS have been released...

Linux Distros Unpatched Vulnerability : CVE-2026-43132

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-verity: correctly handle dmbufioclientcreate failure If either of the calls to dmbufioclientcreate in verityfecctr fails, then dmbufioclientdestroy is later...

Linux Distros Unpatched Vulnerability : CVE-2026-43083

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ioam6: fix OOB and missing lock When trace-type.bit6 is set: if trace-type.bit6 ... queue = skbgettxqueuedev, skb %NASLMINLEVEL 80900 C Tenable, Inc...

Linux Distros Unpatched Vulnerability : CVE-2026-43194

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: consume xmit errors of GSO frames udpgrofrglist.sh and udpgrobench.sh are the flakiest tests currently in NIPA. They fail in the same exact way, TCP GRO te...

Linux Distros Unpatched Vulnerability : CVE-2026-43103

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: lapbether: handle NETDEVPRETYPECHANGE lapbethdatatransmit expects the underlying device type to be ARPHRDETHER. Returning NOTIFYBAD from lapbethdeviceevent...