Security update for dracut

This update for dracut fixes the following issue: Update to version 059+suse.567.gf5cfeb7f7. Securitys issue fixed: CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in die bsc1274432. Other updates and bugfixes: Fixbase: sanitize message...

CGA-4HHQ-CJ6C-7H9M

Bulletin has no description...

CLSA-2026-1786636721 TuxCare security update for dompurify (14 CVEs)

TuxCare rebuilt dompurify to address 14 CVEs. Fixed in 2.4.7-tuxcare.1...

CLSA-2026-1786636600 TuxCare security update for dompurify (16 CVEs)

TuxCare rebuilt dompurify to address 16 CVEs. Fixed in 2.4.0-tuxcare.1...

UBUNTU-CVE-2026-70462

rsync 3.1.0 before 3.5.0 contains a signed integer overflow vulnerability in the I/O timeout implementation that allows attackers to permanently disable connection timeouts by injecting MSGIOTIMEOUT messages carrying non-positive zero or negative values. Attackers can craft malicious MSGIOTIMEOUT...

UBUNTU-CVE-2026-53785

rsync before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to write files outside the intended destination directory tree by crafting relative paths with symlink components in --relative mode. The makepath function follows symlinks pointing outside the destination...

EUVD-2026-45029

Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list Incomplete fix for CVE-2026-31892...

MINI-692F-2GQH-CQCH

Bulletin has no description...

CLSA-2026-1786627141 TuxCare security update for com.fasterxml.jackson.core:jackson-databind (2 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 2 CVEs. Fixed in 2.14.2-tuxcare.1...

MINI-64WC-C7C3-9888

Bulletin has no description...

MINI-JFQ9-57HV-V7GF

Bulletin has no description...

MINI-PR8Q-MVG5-8CQR

Bulletin has no description...

MINI-7543-MG8F-47XW

Bulletin has no description...

MINI-775P-2J3C-JMCF

Bulletin has no description...

CLSA-2026-1786625623 TuxCare security update for craftcms/cms (1 CVE)

TuxCare rebuilt craftcms/cms to address 1 CVE. Fixed in 3.9.15-p8+tuxcare...

CLSA-2026-1786623881 TuxCare security update for org.springframework (9 CVEs)

TuxCare rebuilt 25 org.springframework packages to address 9 CVEs. Fixed in 6.0.16-tuxcare.5...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.13: python3.13-3.13.15-1.hum1 aarch64, x8664 python3.13-debug-3.13.15-1.hum1 aarch64, x8664 python3.13-devel-3.13.15-1.hum1 aarch64, x8664 python3.13-freethreading-3.13.15-1.hum1 aarch64,...

CLEANSTART-2026-RI85888 Security fixes in logstash-exporter-fips 1.6.4-r1

Package logstash-exporter-fips version 1.6.4-r1 fixes 1 vulnerabilities: CVE-2026-27145...

CLEANSTART-2026-EL49045 Security fixes in velero-plugin-for-gcp-fips 1.14.2-r1

Package velero-plugin-for-gcp-fips version 1.14.2-r1 fixes 2 vulnerabilities: CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-YR40466 Security fixes in tigera-operator 1.39.3-r1

Package tigera-operator version 1.39.3-r1 fixes 17 vulnerabilities: CVE-2026-53713, CVE-2026-53714, CVE-2026-53715, CVE-2026-53716, CVE-2026-53717...