CLSA-2026-1787835578 TuxCare security update for 3 packages (2 CVEs)

TuxCare rebuilt 3 packages to address 2 CVEs. Fixed in 15.11.7-tuxcare.1...

golang security, bug fix, and enhancement update

An update is available for golang. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The golang packages provide the Go programming language compiler. Security...

RHSA-2026:59641 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:59635 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:57482 Red Hat Security Advisory: OpenShift Container Platform 4.18.54 packages and security update

Bulletin has no description...

RHSA-2026:56785 Red Hat Security Advisory: OpenShift Container Platform 4.14.72 packages and security update

Bulletin has no description...

CLSA-2026-1787795582 TuxCare security update for @nestjs (2 CVEs)

TuxCare rebuilt 9 @nestjs packages to address 2 CVEs. Fixed in 10.4.22-tuxcare.1...

CVE-2026-81098: Missing Authentication for Critical Function

The Telnyx MCP server exposed its HTTP transport on every interface and did not require a caller credential. packages/mcp-server/src/http.ts served MCP on the root path with a listener bound to all interfaces and parsed the caller's authentication headers in a mode that did not fail when they wer...

PT-2026-82417

JsonKafkaHeaderMapper and DefaultKafkaHeaderMapper include java.net in their default trusted packages list. When these mappers are used — which is the default configuration for all @KafkaListener consumers — an external Kafka producer can inject a java.net.InetAddress type via the spring json...

GO-2026-6256 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, guac, trivy-fips, trivy-operator-fips, podman-fips, kaniko, trivy, skaffold, zot, kaniko-fips, podman, kubescape-server-fips, kubescape, conftest-fips, conftest, docker-fips, livekit-cli, skaffold-fips, scorecard, cloudbeat, kubescape-server...

GO-2026-6255 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, guac, trivy-fips, trivy-operator-fips, podman-fips, kaniko, trivy, skaffold, zot, kaniko-fips, podman, kubescape-server-fips, kubescape, conftest-fips, conftest, docker-fips, livekit-cli, skaffold-fips, scorecard, cloudbeat, kubescape-server...

CVE-2026-55677 vulnerabilities

Vulnerabilities for packages: temporal, temporal-ui-server, temporal-fips, falcosidekick-ui, falcosidekick-ui-fips, listmonk, temporal-ui-server-fips, kube-metrics-adapter-fips, kube-metrics-adapter...

CLSA-2026-1787750951 TuxCare security update for org.springframework (2 CVEs)

TuxCare rebuilt 21 org.springframework packages to address 2 CVEs. Fixed in 4.3.4.RELEASE-tuxcare.4...

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +1030 more potentially affected by unknown CVE via next (>=16.0.0, <=16.3.2)

next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: unknown CVE Source advisory:...

RHSA-2026:57456 Red Hat Security Advisory: OpenShift Container Platform 4.21.30 packages and security update

Bulletin has no description...

RHSA-2026:57361 Red Hat Security Advisory: OpenShift Container Platform 4.22.11 packages and security update

Bulletin has no description...

GHSA-CRPM-PXR9-5JCF vulnerabilities

Vulnerabilities for packages: firefox...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: glibc: compat-libpthread-nonshared-2.43-8.2.hum1 aarch64, x8664 glibc-2.43-8.2.hum1 aarch64, x8664 glibc-all-langpacks-2.43-8.2.hum1 aarch64, x8664 glibc-benchtests-2.43-8.2.hum1 aarch64, x8664...

RLSA-2026:22121 Important: golang security update

The golang packages provide the Go programming language compiler. Security Fixes: net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 cmd/go: golang: Go command cmd/go: Integrity bypass due to checksum validation flaw via malicious module proxy...

Fedora 44 : rust-anstyle-hyperlink / rust-anstyle-progress / rust-cargo / etc (2026-77528477c2)

The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-77528477c2 advisory. - Update cargo-c to version 0.10.24 plus dependency updates. - Initial packaging of the anstyle-hyperlink, anstyle-progress, and cargo-util-terminal crates...