Advisory ROSA-SA-2026-3341

Software: Kernel 6.12.113 OS: ROSA-CHROME Affected versions: = kernel-6.12.113 Affected versions: kernel-6.12.113 CVE-ID: CVE-2026-98432 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: The vulnerability in the implementation of the IPv4 TCP V4 SYN receive socket function is related to improper memory...

Advisory ROSA-SA-2026-3340

Software: Kernel 6.1.190 OS: ROSA-CHROME Affected versions: = kernel-6.1.190 Affected versions: kernel-6.1.190 CVE-ID: CVE-2026-98432 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: The vulnerability in the implementation of the IPv4 protocol within the Linux kernel’s tcpv4synrecvsock function is related ...

Advisory ROSA-SA-2026-3339

Software: Kernel 4.18.0 OS: ROSA Virtualization 3.0 Affected versions: = kernel-4.18.0-553.184.1.el810 Affected versions: kernel-4.18.0-553.184.1.el810 CVE-ID: CVE-2026-98432 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: A vulnerability in the implementation of the IPv4 TCP V4 SYN receive socket functio...

Advisory ROSA-SA-2026-3338

Software: Kernel 4.18.0 OS: ROSA Virtualization 3.1 Affected versions: = kernel-4.18.0-553.184.1.el810 Affected versions: kernel-4.18.0-553.184.1.el810 CVE-ID: CVE-2026-98432 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: A vulnerability in the implementation of the IPv4 TCP V4 SYN receive socket functio...

Advisory ROSA-SA-2026-3337

Software: Kernel 4.18.0 OS: ROSA Virtualization 3.0 Affected versions: = kernel-4.18.0-553.184.1.el810 Affected versions: kernel-4.18.0-553.184.1.el810 CVE-ID: CVE-2026-98432 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: A vulnerability in the implementation of the IPv4 TCP V4 SYN receive socket functio...

Advisory ROSA-SA-2026-3336

Software: Kernel 4.18.0 OS: ROSA Virtualization 2.1 Affected versions: = kernel-4.18.0-553.184.1.el810 Affected versions: kernel-4.18.0-553.184.1.el810 CVE-ID: CVE-2026-98432 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: A vulnerability in the implementation of the IPv4 TCP V4 SYN receive socket functio...

Advisory ROSA-SA-2026-3332

Software: Google Brotli OS: ROSA Virtualization 3.0 Affected versions: = brotli 1.0.10 Affected versions: brotli 1.0.10 CVE-ID: CVE-2026-111497 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: A remote unauthorized attacker can send a specially crafted stream compressed using Brotli CVE-STATUS: The...

Advisory ROSA-SA-2026-3328

Software: librsvg OS: ROSA-CHROME Unaffected versions: = librsvg-2.62.4-1 Affected versions: librsvg-2.62.4-1 CVE-ID: CVE-2026-96889 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: An attacker can cause a denial of service DoS or execute arbitrary code RCE on the system CVE-STATUS: Vulnerability has been...

Advisory ROSA-SA-2026-3327

Software: librsvg OS: ROSA-CHROME Unaffected versions = librsvg-2.52.11-2 Affected versions librsvg-2.52.11-2 CVE-ID: CVE-2026-96889 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: An attacker can cause a denial of service DoS or execute arbitrary code RCE on the system CVE-STATUS: Vulnerability has been...

Advisory ROSA-SA-2026-3324

Software: ruby3.2 OS: ROSA-CHROME Affected versions: = ruby3.2-3.2.10-3 Unaffected versions: ruby3.2-3.2.10-3 CVE-ID: CVE-2026-110264, CVE-2026-93577, CVE-2026-97229 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: Allows an unauthenticated user to execute arbitrary code on the server CVE-STATUS:...

Advisory ROSA-SA-2026-3320

Software: Apache HTTPD OS: ROSA-CHROME Affected versions: = apache-2.4.69-3 Unaffected versions: apache-2.4.69-3 CVE IDs: CVE-2026-63292, CVE-2026-56154, CVE-2026-56153, CVE-2026-57941, CVE-2026-59685, CVE-2026-93546 BDU ID: None CVE-Crit: HIGH CVE-DESC.: Vulnerabilities enabling root access to t...

Advisory ROSA-SA-2026-3319

Software: php8 OS: ROSA-CHROME Affected versions: = php8-8.3.36-1 Affected versions: php8-8.3.36-1 CVE-ID: CVE-2026-109618, CVE-2026-109619 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: The vulnerabilities allow an attacker to remotely and without authentication execute arbitrary code on the server...

Advisory ROSA-SA-2026-3318

Software: php7 OS: ROSA-CHROME Affected versions: = php-7.4.33-14 Affected versions: php-7.4.33-14 CVE-ID: CVE-2026-109618, CVE-2026-109619 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: The vulnerabilities allow an attacker to remotely and without authentication execute arbitrary code on the server...

CVE-2026-8863

Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. An attacker with administrative privileges or the ability to modify the boot process could use one of the vulnerable shim bootloaders to bypass Secure Boot protections and execute arbitrary code before the...

EUVD-2026-35791

Multiple Microsoft-sigend UEFI SHIM bootloaders are vulnerable to SecureBoot bypass. An attacker with administrative privileges or the ability to modify the boot process could use one of the vulnerable shim bootloaders to bypass Secure Boot protections and execute arbitrary code before the...

Advisory ROSA-SA-2026-3312

Software: ffmpeg 4.4.6 OS: ROSA-CHROME Unaffected versions: = ffmpeg-4.4.6-4 Affected versions: ffmpeg-4.4.6-4 CVE-ID: CVE-2026-40962 BDU-ID: None CVE-Crit: Medium CVE-DESCRIPTION: The vulnerability related to integer overflow in FFmpeg allows an attacker to execute write operations beyond the...

Advisory ROSA-SA-2026-3311

Component: avahi 0.8 OS: ROSA-CHROME Unaffected versions: = avahi-0.8-12.git35bb1b.11 Affected versions: avahi-0.8-12.git35bb1b.11 CVE-ID: CVE-2026-34933 BDU-ID: None CVE-Crit: Medium CVE-DESC.: The vulnerability in Avahi allows an unprivileged local user to cause an emergency termination of...

Advisory ROSA-SA-2026-3307

Software: python-future 0.18.2 Operating System: ROSA-CHROME Unaffected versions: = python-future-0.18.2-4 Affected versions: python-future-0.18.2-4 CVE-ID: CVE-2022-40899 BDU-ID: 2023-02446 CVE-Crit: HIGH CVE-DESCRIPTION: The compatibility vulnerability in Python Charmers Future is related to...

Advisory ROSA-SA-2026-3306

Component: PHP 7.4.33 OS: ROSA-CHROME Affected versions: = php-7.4.33-13 Affected versions: php-7.4.33-13 CVE-ID: CVE-2024-5458 BDU-ID: 2024-04846 CVE-Crit: Medium CVE-DESCRIPTION: The vulnerability in the filtervar function of the PHP interpreter involves insufficient validation of data...

Advisory ROSA-SA-2026-3301

Component: libconfuse 3.3 Operating System: ROSA-CHROME Unaffected versions: = libconfuse-3.3-3 Affected versions: libconfuse-3.3-3 CVE-ID: CVE-2022-40320 BDU-ID: 2022-05795 CVE-Crit: LOW CVE-DESC.: The vulnerability in the cfgtildeexpand function of the configuration file parser library libConfu...