CLSA-2026-1790102459 TuxCare security update for org.springframework (12 CVEs)

TuxCare rebuilt 23 org.springframework packages to address 12 CVEs. Fixed in 5.2.13.RELEASE-tuxcare.11...

CLSA-2026-1790074038 TuxCare security update for org.springframework (30 CVEs)

TuxCare rebuilt 22 org.springframework packages to address 30 CVEs. Fixed in 5.1.5.RELEASE-tuxcare.4...

Important: Red Hat Security Advisory: Red Hat OpenShift Builds 1.9.1

Red Hat OpenShift Builds 1.9.1 Release of Red Hat OpenShift Builds 1.9.1...

Important: Red Hat Security Advisory: Red Hat AI Base Images 3.4.2 (CUDA 12.9)

Red Hat AI Base Images 3.4.2 CUDA 12.9 is now available. Red Hat® AI Base Images...

Important: Red Hat Security Advisory: Red Hat AI Base Images 3.4.2 (ROCm 7.1)

Red Hat AI Base Images 3.4.2 ROCm 7.1 is now available. Red Hat® AI Base Images...

Important: Red Hat Security Advisory: Red Hat AI Base Images 3.4.2 (CPU)

Red Hat AI Base Images 3.4.2 CPU is now available. Red Hat® AI Base Images...

Important: Red Hat Security Advisory: Red Hat OpenShift Builds 1.8.2

Red Hat OpenShift Builds 1.8.2 Release of Red Hat OpenShift Builds 1.8.2...

Important: Red Hat Security Advisory: Red Hat OpenShift Builds 1.9.1

Red Hat OpenShift Builds 1.9.1 Release of Red Hat OpenShift Builds 1.9.1...

CVE-2026-88340

An invalid pointer release vulnerability exists in YARA 4.5.8 during the deserialization of compiled .yrc rule files . The flaw is caused by insufficient validation of external-variable pointers , which can lead to an invalid free in yr_rules_destroy() or wild pointer access in yr_object_create()...

CVE-2026-88340

An invalid pointer release vulnerability exists in YARA 4.5.8 during deserialization of compiled .yrc rule files. The vulnerability is caused by insufficient validation of external-variable pointers, which may lead to invalid free in yrrulesdestroy or wild pointer access in yrobjectcreate. An...

EUVD-2026-84849

An invalid pointer release vulnerability exists in YARA 4.5.8 during deserialization of compiled .yrc rule files. The vulnerability is caused by insufficient validation of external-variable pointers, which may lead to invalid free in yrrulesdestroy or wild pointer access in yrobjectcreate. An...

CVE-2026-88340

An invalid pointer release vulnerability exists in YARA 4.5.8 during deserialization of compiled .yrc rule files. The vulnerability is caused by insufficient validation of external-variable pointers, which may lead to invalid free in yrrulesdestroy or wild pointer access in yrobjectcreate. An...

CVE-2026-88340: Release of Invalid Pointer or Reference

An invalid pointer release vulnerability exists in YARA 4.5.8 during deserialization of compiled .yrc rule files. The vulnerability is caused by insufficient validation of external-variable pointers, which may lead to invalid free in yrrulesdestroy or wild pointer access in yrobjectcreate. An...

CVE-2026-88340

An invalid pointer release vulnerability exists in YARA 4.5.8 during deserialization of compiled .yrc rule files. The vulnerability is caused by insufficient validation of external-variable pointers, which may lead to invalid free in yrrulesdestroy or wild pointer access in yrobjectcreate. An...

SUSE CVE-2026-27660

Gitea versions before 1.25.5 allow draft release data or attachments to be accessed without the required write permission...

CVE-2026-75939 Openshift/oc-mirror: release signature verification: openpgp signatureerror checked before signed body is consumed

A flaw was found in openshift/oc-mirror. The tool incorrectly verifies PGP Pretty Good Privacy release image signatures by checking for signature errors before the entire signed body is processed, leading to a bypass of the signature verification. A remote attacker, by intercepting or manipulatin...

CVE-2026-75939: Improper Verification of Cryptographic Signature

A flaw was found in openshift/oc-mirror. The tool incorrectly verifies PGP Pretty Good Privacy release image signatures by checking for signature errors before the entire signed body is processed, leading to a bypass of the signature verification. A remote attacker, by intercepting or manipulatin...

SUSE SLED15 / SLES15 Security Update : httpcomponents-client (SUSE-SU-2026:4028-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4028-1 advisory. This update for httpcomponents-client fixes the following issue: - CVE-2026-64607: improper release of underlying...

ROS-20260921-73-0122

The vulnerability of the ipcidralloc function in the Linux operating system is related to improper memory release. Exploiting this vulnerability can allow an attacker to enhance their privileges...

ROS-20260921-73-0071

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...