CLSA-2026-1789031241 TuxCare security update for 9 packages (1 CVE)

TuxCare rebuilt 9 packages to address 1 CVE. Fixed in 5.18.1-tuxcare.6...

GHSA-4C74-G9CQ-VHC5 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange...

CVE-2026-53113 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu-melange...

CVE-2026-75596 vulnerabilities

Vulnerabilities for packages: drain-cleaner-fips, spark, apache-hop, kafka, elasticsearch-fips, floci, flyway, zookeeper, zookeeper-fips, strimzi-kafka-operator, flyway-fips, kayenta-fips, pinot, cruise-control, seata, cruise-control-fips, neo4j, cassandra-reaper, cassandra,...

CVE-2026-84375 vulnerabilities

Vulnerabilities for packages: pulumi, code-server, eslint, lerna, renovate, prism, argo-workflows, ts-patch, vitess, kubeflow-katib, opensearch-dashboards, sqlpad...

RHEL 9 : RHEL AI 3.6 RPM runtime CVE fix - ffmpeg (Important) (RHSA-2026:66381)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:66381 advisory. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application...

RockyLinux 10 : osbuild-composer (RLSA-2026:65895)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:65895 advisory. crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application CVE-2026-33810 net/mail: golang: net/mai...

GHSA-3MCP-22MF-VRW3 vulnerabilities

Vulnerabilities for packages: kibana, langfuse, librechat, redisinsight, jitsucom-jitsu, wazuh-dashboard, nextcloud-server, langfuse-fips, opensearch-dashboards, gitlab-rails-ce, kubeflow-centraldashboard, awx, lerna, semaphore, wazuh-dashboard-fips, azurite, prism, opensearch-dashboards-fips,...

GHSA-6R2R-WW24-7H52 vulnerabilities

Vulnerabilities for packages: datahub-ingestion, mlflow, awx, opal, datahub-ingestion-fips, checkov...

CVE-2026-67321 vulnerabilities

Vulnerabilities for packages: kibana, langfuse, librechat, redisinsight, jitsucom-jitsu, wazuh-dashboard, nextcloud-server, langfuse-fips, opensearch-dashboards, gitlab-rails-ce, kubeflow-centraldashboard, awx, lerna, semaphore, wazuh-dashboard-fips, azurite, prism, opensearch-dashboards-fips,...

GHSA-7JX3-JQCP-HHGC vulnerabilities

Vulnerabilities for packages: opal, awx, mlflow, checkov...

CVE-2026-67321 vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, jitsucom-jitsu, lerna, langfuse, prism, nextcloud-server, opensearch-dashboards...

CLSA-2026-1788970606 TuxCare security update for 8 packages (1 CVE)

TuxCare rebuilt 8 packages to address 1 CVE. Fixed in 3.6.5-tuxcare.6...

Important: Red Hat Security Advisory: Red Hat Update Infrastructure 5.3 security update

The latest release of Red Hat Update Infrastructure. For more details, see the product documentation. Red Hat Update Infrastructure RHUI container images are based on the latest RHUI RPM packages and the ubi9 or ubi9-init base images. This release updates to the latest version...

CLSA-2026-1788960197 TuxCare security update for 13 packages (1 CVE)

TuxCare rebuilt 13 packages to address 1 CVE. Fixed in 2.18.1-tuxcare.5...

CLSA-2026-1788955035 TuxCare security update for 4 packages (1 CVE)

TuxCare rebuilt 4 packages to address 1 CVE. Fixed in 6.3.0-tuxcare.2...

CVE-2026-84445 vulnerabilities

Vulnerabilities for packages: envoy-gateway, pinniped-fips, pulumi-kubernetes-operator, redpanda-console-fips, crossplane-provider-aws-codestarconnections-fips, amazon-ssm-agent, crossplane-provider-aws-appsync, crossplane-cli, virt-handler-fips, crossplane-provider-aws-backup, falcosidekick,...

BIT-ELK-2026-78583 Incorrect Authorization in Kibana Leading to Privilege Escalation

Incorrect Authorization CWE-863 in Kibana can lead to privilege escalation via Input Data Manipulation CAPEC-153. Elasticsearch cluster privilege declarations originating from integration packages were not validated before being used to mint credentials for enrolled Elastic Agents. A user holding...

ROOT-OS-DEBIAN-12-CVE-2025-71088 CVE-2025-71088 in linux - Patched by Root

Root has patched CVE-2025-71088 in the linux package for Root:Debian:12. Multiple fixed versions available...

CVE-2026-75595 vulnerabilities

Vulnerabilities for packages: drain-cleaner-fips, spark, apache-hop, kafka, elasticsearch-fips, floci, flyway, zookeeper, zookeeper-fips, strimzi-kafka-operator, flyway-fips, kayenta-fips, pinot, cruise-control, seata, cruise-control-fips, neo4j, cassandra-reaper, cassandra,...