Important: Red Hat Security Advisory: Red Hat AI Base Images 3.3.3 (ROCm 6.4)

Red Hat AI Base Images 3.3.3 ROCm 6.4 is now available. Red Hat® AI Base Images...

CVE-2026-92860

CVE-2026-92860 affects rcourtman Pulse versions up to 6.0.4/6.1.0-rc.4 . The vulnerability resides in the Quick Security Setup Handler component, specifically the fmt.Sprintf function within /api/security/quick-setup. Manipulating the Username argument triggers improper input validation , enablin...

CLSA-2026-1789638824 TuxCare security update for drupal/tfa_basic (1 CVE)

TuxCare rebuilt drupal/tfabasic to address 1 CVE. Fixed in 7.1.2-p1+tuxcare...

ROOT-APP-PYPI-GHSA-GR75-JV2W-4656 GHSA-gr75-jv2w-4656 in langchain - Patched by Root

Root has patched GHSA-gr75-jv2w-4656 in the langchain package for Root:PyPI. Multiple fixed versions available...

firefox: Sandbox escape due to use-after-free in the DOM: Security component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the DOM: Security component...

firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2, Firefox ESR 140.15 and Firefox ESR 115.40

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Internally found bugs present in Firefox 154, Firefox ESR 153.1, Firefox ESR 140.14 and Firefox ESR 115.39. Some of these bugs showed evidence of memory corruption or another security-relevant...

WordPress Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) plugin <= 9.8.1 - Missing Authorization to 2FA Bypass vulnerability

Missing Authorization to 2FA Bypass vulnerability discovered by Michael Holmquist in WordPress Plugin Really Simple SSL versions = 9.8.1...

kernel: netfilter: xt_policy: fix strict mode inbound policy matching

A flaw was found in the Linux kernel's netfilter component, which is responsible for network packet filtering. This vulnerability, located in the xtpolicy module, involves an error in how strict inbound network policies are matched. This could allow an attacker to bypass established security rule...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.98 bug fix and security update

Red Hat OpenShift Container Platform release 4.12.98 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.71 bug fix and security update

Red Hat OpenShift Container Platform release 4.13.71 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...

Incorrect Authorization

Overview org.jenkins-ci.plugins:script-security is a package that allows Jenkins administrators to control what in-process scripts can be run by less-privileged users. Affected versions of this package are vulnerable to Incorrect Authorization through improper handling of collection type casting...

Incorrect Authorization

Overview org.jenkins-ci.plugins:script-security is a package that allows Jenkins administrators to control what in-process scripts can be run by less-privileged users. Affected versions of this package are vulnerable to Incorrect Authorization through the execution of unintercepted operations...

Important: Red Hat Security Advisory: Multicluster Global Hub 1.8.2 security update

Multicluster Global Hub v1.8.2 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...

[SECURITY] Fedora 43 Update: roundcubemail-1.6.19-1.fc43

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

[SECURITY] Fedora 44 Update: roundcubemail-1.7.4-1.fc44

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

CVE-2026-92860: Improper Input Validation

A security flaw has been discovered in rcourtman Pulse up to 6.0.4/6.1.0-rc.4. Affected by this issue is the function fmt.Sprintf of the file /api/security/quick-setup of the component Quick Security Setup Handler. The manipulation of the argument Username results in improper input validation. Th...

CVE-2026-93147: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: s390/bpf: Replace ly instruction with llgf cpunr is a 32 bit value and BPFREG0 is a 64 bit register, when ly loads the cpunr into BPFREG0 it does not zero the upper bits, but llgf does...

CVE-2026-90409: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Add vmbind region with kbo range overlap check When a VM is created, caller has to specify the range of the address space carve-out set aside for mapping kernel BO's. That means vmbind mappings of UM-exposed BO's...

KLA91296 Multiple vulnerability in Microsoft Other

Multiple vulnerability was found in Microsoft Other. Malicious users can exploit this vulnerability to bypass security restrictions, obtain sensitive information. Original advisories CVE-2026-55946 Exploitation Related products Microsoft-Copilot-Studio CVE list CVE-2026-55946 unknown Solution...

PT-2026-94579

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the AppArmor module where the unprivileged transition restriction on unconfined profiles is not correctly applied when a task is already confined by a stack. This flaw...