39534 matches found
JLSEC-2026-998
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, Magick frees the memory of the XML tree via the DestroyXMLTree function; however, this process is executed recursively with no depth limit imposed. When...
JLSEC-2026-967 ImageMagick has a possible infinite loop in its JPEG encoder when using `jpeg:extent`
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a continue statement in the JPEG extent binary search loop in the jpeg encoder causes an infinite loop when writing persistently fails. An attacker can trigger ...
JLSEC-2026-969 ImageMagick: Invalid MSL <map> can result in a use after free
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the MSL interpreter crashes when processing a invalid element that causes it to use an image after it has been freed. Versions 7.1.2-15 and 6.9.13-40 contain a...
JLSEC-2026-840
A call to ConformPixelInfo in the SetImageAlphaChannel routine of /MagickCore/channel.c caused a subsequent heap-use-after-free or heap-buffer-overflow READ when GetPixelRed or GetPixelBlue was called. This could occur if an attacker is able to submit a malicious image file to be processed by...
Important: Red Hat Security Advisory: RHTAS 1.4.3 - CLI Stack Release
The 1.4.3 release of the RHTAS CLIs. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.4 The RHTAS CLI Stack images for RHTAS 1.4.3...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.67 bug fix and security update
Red Hat OpenShift Container Platform release 4.15.67 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.70 bug fix and security update
Red Hat OpenShift Container Platform release 4.14.70 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: Red Hat Build of Apache Camel 4.18.3 for Quarkus 3.33 update is now available (RHBQ 3.33.2.SP3)
An update for Red Hat Build of Apache Camel 4.18.3 for Quarkus 3.33 update is now available RHBQ 3.33.2.SP3. The purpose of this text-only errata is to inform you about the enhancements that improve your developer experience and ensure the security and stability of your products. Red Hat Product...
Security update for prometheus-ha_cluster_exporter
This update for prometheus-haclusterexporter fixes the following issue: CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266552. Other updates and bugfixes: Release 1.4.2 Use proper obs time forma...
SUSE-SU-2026:3421-1 Security update for prometheus-ha_cluster_exporter
This update for prometheus-haclusterexporter fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266552. Other updates and bugfixes: - Release 1.4.2 Use proper obs time...
CLEANSTART-2026-GB48358 Security fixes in logstash-fips 9.3.0-r1
Package logstash-fips version 9.3.0-r1 fixes 2 vulnerabilities: ghsa-j4pr-3wm6-xx2r, ghsa-72hv-8253-57qq...
CLEANSTART-2026-YX95586 Security fixes in keycloak 26.5.0-r1
Package keycloak version 26.5.0-r1 fixes 6 vulnerabilities: ghsa-h5fg-jpgr-rv9c, ghsa-45p5-v273-3qqr, CVE-2017-12159, CVE-2017-12158, ghsa-5rfx-cp42-p624...
CLEANSTART-2026-RF73854 Security fixes in keda 2.18.3-r0
Package keda version 2.18.3-r0 fixes 6 vulnerabilities: CVE-2026-26958, CVE-2025-68156, CVE-2026-24051, ghsa-cfpf-hrx2-8rv6, ghsa-fw7p-63qq-7hpr...
CLEANSTART-2026-NK41432 Security fixes in fabric-peer 2.5.15-r2
Package fabric-peer version 2.5.15-r2 fixes 1 vulnerabilities: CVE-2026-42504...
CLEANSTART-2026-BX90516 Security fixes in cert-manager-cmctl-fips 2.4.0-r3
Package cert-manager-cmctl-fips version 2.4.0-r3 fixes 30 vulnerabilities: CVE-2026-27143, CVE-2026-39820, CVE-2026-42499, CVE-2026-39836, CVE-2026-32281...
CLEANSTART-2026-GU87880 Security fixes in elastic-beats 9.1.10-r3
Package elastic-beats version 9.1.10-r3 fixes 4 vulnerabilities: CVE-2026-46600, CVE-2026-56852, CVE-2026-39822, CVE-2026-42505...
CLEANSTART-2026-AB17721 Security fixes in solr 10.0.0-r6
Package solr version 10.0.0-r6 fixes 4 vulnerabilities: CVE-2026-8384, CVE-2026-6790, CVE-2026-10051, CVE-2026-10050...
CLEANSTART-2026-OQ60527 Security fixes in velero-plugin-for-gcp-fips 1.13.2-r0
Package velero-plugin-for-gcp-fips version 1.13.2-r0 fixes 6 vulnerabilities: CVE-2026-27142, CVE-2026-27139, CVE-2026-34986, CVE-2026-24051, CVE-2026-25679...