RHSA-2026:42078 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

Bulletin has no description...

GHSA-9WJQ-CP2P-HRGF vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, ruby3.3-rails, pghero, ruby3.4-rails, pghero-fips, ruby4.0-rails...

GHSA-8WHX-365G-H9VV vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, ruby3.3-rails, pghero, ruby3.4-rails, pghero-fips, ruby4.0-rails...

GHSA-XVCM-6775-5M9R vulnerabilities

Vulnerabilities for packages: keep-fips, rancher-api-ui, authentik, vitess, keep, nextcloud-server, authentik-fips...

GHSA-HM4W-WWCW-MR6R vulnerabilities

Vulnerabilities for packages: datahub-ingestion, kubeflow, azureml-inference-server-http-fips, apache-beam-python-3.12-sdk, label-studio, kubeflow-volumes-web-app, datahub-ingestion-fips, kubeflow-jupyter-web-app, request-1276, awx, wazuh-manager-fips, wazuh-manager, kubeflow-pipelines, authentik...

GHSA-H668-6X6G-F8R5 vulnerabilities

Vulnerabilities for packages: ascan...

GHSA-RWJ8-PGH3-R573 vulnerabilities

Vulnerabilities for packages: mlflow, checkov...

USN-8593-1: Linux kernel vulnerabilities

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. CVE-2025-54518 Several security issues...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.69 bug fix and security update

Red Hat OpenShift Container Platform release 4.13.69 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...

RLSA-2026:41897 Important: .NET 10.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.110 and .NET Runtime 10.0.10...

RLSA-2026:41900 Important: .NET 10.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.110 and .NET Runtime 10.0.10...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.69 security and extras update

Red Hat OpenShift Container Platform release 4.13.69 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a security impact of Low...

Little CMS: lcms2: mm2/Little-CMS: Little CMS: Information disclosure or denial of service via integer overflow in CubeSize

A flaw was found in Little CMS. An integer overflow in the CubeSize function within cmslut.c occurs because the overflow check is performed after the multiplication. An attacker could exploit this vulnerability by providing a specially crafted input, potentially leading to information disclosure ...

SAP Memory Pipes (MPI) Desynchronization

SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable to request smuggling and request concatenation attacks. An unauthenticated attacker can prepend a victim's request with arbitrary data. This...

openjdk: OpenJDK: Enhance AWT ImagingLib (Oracle CPU 2026-07)

A flaw was found in OpenJDK. When the software processes certain images, a specific function fails to manage memory boundaries correctly. This can lead to the application attempting to access invalid memory or dereference a null pointer, which may cause the application to unexpectedly terminate...

[SECURITY] Fedora 44 Update: nginx-mod-brotli-1.0.0~rc-13.fc44

NGINX module for Brotli compression...

PT-2026-64152

Name of the Vulnerable Software and Affected Versions Appriss Insights Equifax Victim Information Notification Exchange VINE affected versions not specified Description An unauthenticated attacker can send a specially-crafted request to bypass the login page. This allows for the unauthorized acce...

CVE-2026-60367

creationtimestamp| type| source ---|---|--- 2026-07-22 23:38:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrbikr4j5g2j 2026-07-23 00:48:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrbmjkocd42q 2026-07-23 02:00:17+00:00| seen|...

CVE-2026-60439

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware component: Centralized Thirdparty Jars. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2026-60370

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware component: Centralized Thirdparty Jars. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...