yelp: yelp-xsl: Overly Permissive Content Security Policy in Yelp Allows Host File Disclosure from Flatpak Applications

A flaw was found in Yelp due to an overly permissive Content Security Policy CSP implementation provided by yelp-xsl. A malicious Flatpak application can open crafted help content through the OpenURI portal. By embedding an untrusted CSS stylesheet within a structured SVG document,...

Important: Red Hat Security Advisory: yelp security update

An update for yelp is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

DEBIAN-CVE-2026-77014

A flaw was found in libsoup's SoupServer HTTP Range header processing. The sortranges comparator in soup-message-headers.c truncates a 64-bit subtraction result to 32-bit int, flipping the sign for range offsets differing by more than INTMAX. This causes silent omission of requested byte ranges...

CVE-2026-73542

creationtimestamp| type| source ---|---|--- 2026-08-20 08:45:04+00:00| seen| https://jvn.jp/en/vu/JVNVU91609598...

Security update for container-suseconnect

This update for container-suseconnect rebuilds it against the current go security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: SUSE...

CVE-2026-14948

creationtimestamp| type| source ---|---|--- 2026-08-20 08:20:38+00:00| seen| https://infosec.exchange/users/certvde/statuses/117126859166464287 2026-08-20 11:01:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7dz2im3xr7qze...

CVE-2026-14953

creationtimestamp| type| source ---|---|--- 2026-08-20 08:20:38+00:00| seen| https://infosec.exchange/users/certvde/statuses/117126859166464287...

CVE-2025-14601

creationtimestamp| type| source ---|---|--- 2026-08-20 08:08:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/did3cppqdpbkc 2026-08-20 12:15:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2025-14601...

CVE-2026-14163

creationtimestamp| type| source ---|---|--- 2026-08-20 08:02:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dmrvpjlvfakri...

CVE-2026-76220

creationtimestamp| type| source ---|---|--- 2026-08-20 08:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtiro7oyye24...

Important: Red Hat Security Advisory: Red Hat AI Inference 3.4.4 (rocm)

Red Hat AI Inference 3.4.4 rocm is now available. Red Hat AI Inference...

Important: Red Hat Security Advisory: Red Hat AI Inference 3.4.4 (cuda)

Red Hat AI Inference 3.4.4 cuda is now available. Red Hat AI Inference...

Important: Red Hat Security Advisory: Red Hat AI Inference 3.4.4 (spyre)

Red Hat AI Inference 3.4.4 spyre is now available. Red Hat AI Inference...

Moderate: Red Hat Security Advisory: Red Hat AI Inference Model Optimization Tools 3.4.4 (cuda)

Red Hat AI Inference Model Optimization Tools 3.4.4 cuda is now available. Red Hat AI Inference Model Optimization Tools...

Important: Red Hat Security Advisory: Red Hat AI Inference 3.4.4 (cpu)

Red Hat AI Inference 3.4.4 cpu is now available. Red Hat AI Inference...

ECHO-37B9-2184-9E46

Bulletin has no description...

ECHO-D43D-3438-B69F

Bulletin has no description...

ECHO-8340-2DF2-4096

Bulletin has no description...

ECHO-EF47-70D2-ABED

Bulletin has no description...

WordPress Clearfy plugin < 2.4.3 - Admin+ PHP Object Injection via Settings Import vulnerability

Admin+ PHP Object Injection via Settings Import vulnerability discovered by Omar Elshopky in WordPress Plugin Clearfy Cache versions 2.4.3...