CVE-2026-63824 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-63824 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-43966 affecting package rabbitmq-server for versions less than 3.13.7-8

CVE-2026-43966 affecting package rabbitmq-server for versions less than 3.13.7-8. A patched version of the package is available...

CVE-2026-64598 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-64598 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64553 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64553 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64411 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64411 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-63964 affecting package kernel for versions less than 6.6.144.1-2

CVE-2026-63964 affecting package kernel for versions less than 6.6.144.1-2. A patched version of the package is available...

CVE-2026-65529

creationtimestamp| type| source ---|---|--- 2026-08-12 23:16:21+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mswb5alio52j...

CVE-2026-71471

A flaw was found in acm-search-v2-rhel9. An attacker with administrative privileges on the hub cluster, specifically with patch access to the Search Custom Resource CR, could exploit a vulnerability in the Collector.ImageOverride field. This allows the attacker to deploy an arbitrary container...

CLSA-2026-1786569587 TuxCare security update for org.springframework (2 CVEs)

TuxCare rebuilt 23 org.springframework packages to address 2 CVEs. Fixed in 5.2.13.RELEASE-tuxcare.9...

MINI-7XV4-4VGV-GCG4

Bulletin has no description...

CVE-2026-73240

Specifically crafted inputs may lead to git argument injection in Apache Allura. This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue...

CLSA-2026-1786553094 TuxCare security update for 88 packages (1 CVE)

TuxCare rebuilt 88 packages to address 1 CVE. Fixed in 9.4.53.v20231009-tuxcare.7...

CLSA-2026-1786550111 TuxCare security update for 90 packages (1 CVE)

TuxCare rebuilt 90 packages to address 1 CVE. Fixed in 9.4.57.v20241219-tuxcare.5...

CVE-2026-68969

Apache Airflow wrote Variable values and Connection extra contents to the audit log in cleartext when they were submitted through the bulk endpoints PATCH /api/v2/variables and PATCH /api/v2/connections. The audit-log masking recognised only top-level request fields, and a bulk request nests its...

CLSA-2026-1786547487 TuxCare security update for org.springframework.pulsar (3 CVEs)

TuxCare rebuilt 6 org.springframework.pulsar packages to address 3 CVEs. Fixed in 1.2.13-tuxcare.1...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.71 bug fix and security update

Red Hat OpenShift Container Platform release 4.14.71 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...

ROOT-APP-NPM-CVE-2026-44582 CVE-2026-44582 in next - Patched by Root

Root has patched CVE-2026-44582 in the next package for Root:npm. Multiple fixed versions available...

JLSEC-2026-1261 GNU patch is vulnerable to a denial of service (DoS) due to improper validation of hunk (single...

GNU patch is vulnerable to a denial of service DoS due to improper validation of hunk single block of changes in diff line offsets in unified-diff input. A specially crafted patch can specify an extremely large line number, causing the application to enter an effectively infinite processing loop...

JLSEC-2026-1260 GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified...

GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff patch file. Improper handling of consecutive end-of-file newline markers can corrupt internal hunk single block of changes in diff data structures, causing the application to pass a NULL pointer...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the renderCss process. An attacker can inject malicious scripts by providing crafted custom styles through the editor settings interface, which are then rendered on backend pages. This is only exploitable if...