CLEANSTART-2026-AB17721 Security fixes in solr 10.0.0-r6

Package solr version 10.0.0-r6 fixes 4 vulnerabilities: CVE-2026-8384, CVE-2026-6790, CVE-2026-10051, CVE-2026-10050...

Security update for prometheus-ha_cluster_exporter

This update for prometheus-haclusterexporter fixes the following issue: CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266552. Other updates and bugfixes: Release 1.4.2: Use proper obs time form...

CVE-2026-64523

A flaw was found in the Linux kernel's networking handshake component. This vulnerability occurs because a critical file reference is not properly maintained during the handshake process. An attacker could potentially exploit this by causing the system to prematurely release a socket, leading to ...

CVE-2026-64471

A flaw was found in the Linux kernel's Bluetooth subsystem btusb. When a Bluetooth controller fails to register, the system may not properly release associated interfaces. This can lead to a use-after-free or double-free memory error when these interfaces are later disconnected, potentially causi...

[SECURITY] Fedora 43 Update: nginx-mod-naxsi-1.6-21.fc43

naxsi is an nginx module that provides score based Web Application Firewall WAF abilities in a highly granular fashion...

[SECURITY] Fedora 43 Update: nginx-mod-brotli-1.0.0~rc-13.fc43

NGINX module for Brotli compression...

Wazuh 4.14.7

Wazuh is a free and open source security platform that unifies XDR and SIEM capabilities. It protects workloads across on-premises, virtualized, containerized, and cloud-based environments. This is the source code release...

PT-2026-66395

The Customer Switching WordPress plugin before 2.1.3 does not securely bind an active user-switching session to the operator who initiated it, allowing a lower-privileged account that an operator is currently switched into to be resolved as that operator and to switch into any permitted account,...

PT-2026-66571

Improper Protection of Alternate Path vulnerability in Apache Tika. This issue affects Apache Tika: from 4.0.0-alpha-1 before 4.0.0-beta-1. Users are recommended to upgrade to version 4.0.0-beta-1, which fixes the issue...

PT-2026-66529

DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks. Prior to 1.0.4, is url safe in src/helpers.ts strips the @ userinfo delimiter with remove at symbol in string before new URL parses the URL, allowing an attacker-controlled URL to bypass internal-...

Fedora 44 : libssh (2026-c60881e04b)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c60881e04b advisory. New upstream release 0.12.2 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

The vulnerability of the x25_queue_rx_frame() function in the net/x25/x25_in.c module, a part of the Linux kernel’s networking functions, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the x25queuerxframe function in the net/x25/x25in.c module, which is part of the Linux kernel’s networking functions, involves the multiple release of the same resource or descriptor. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...

Fedora 45 : python3.12 (2026-05338c2e02)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-05338c2e02 advisory. Automatic update for python3.12-3.12.13-6.fc45. Changelog Tue Jul 28 2026 Luk Zachar - 3.12.13-6 - Security fix for CVE-2026-15308 Resolves: rhbz2498688 Tue...

CVE-2026-56852 affecting package docker-cli for versions less than 25.0.7-4

CVE-2026-56852 affecting package docker-cli for versions less than 25.0.7-4. A patched version of the package is available...

CVE-2026-66033 affecting package libssh2 for versions less than 1.11.1-5

CVE-2026-66033 affecting package libssh2 for versions less than 1.11.1-5. A patched version of the package is available...

CVE-2026-56852 affecting package moby-engine for versions less than 25.0.3-19

CVE-2026-56852 affecting package moby-engine for versions less than 25.0.3-19. A patched version of the package is available...

Important: Red Hat Security Advisory: Red Hat Quay 3.18.0

Red Hat Quay 3.18.0 is now available with bug fixes and feature enhancements. Quay 3.18.0...

CVE-2026-54666 swagger-typescript-api vulnerable to code injection via unescaped OpenAPI path strings in generated method bodies

swagger-typescript-api generates API clients for Fetch or Axios from an OpenAPI Specification. Prior to 13.12.2, src/schema-routes/schema-routes.ts passes OpenAPI path keys through parseRouteName to templates/default/procedure-call.ejs and templates/modular/procedure-call.ejs without escaping...

CVE-2026-64461

A flaw was found in the Linux kernel's MediaTek PCIe driver. When a Peripheral Component Interconnect Express PCIe port fails to enable, the associated Interrupt Request IRQ domains are not properly released. This resource leak can accumulate over time, potentially leading to a denial of service...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.40 bug fix and security update

Red Hat OpenShift Container Platform release 4.19.40 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...