RLSA-2026:28911 Moderate: coreutils security update

The coreutils packages contain the GNU Core Utilities and represent a combination of the previously used GNU fileutils, sh-utils, and textutils packages. Security Fixes: coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification CVE-2025-5278 For more details about the security...

RHSA-2026:29151 Red Hat Security Advisory: nginx:1.26 security update

Bulletin has no description...

RHSA-2026:29110 Red Hat Security Advisory: bind security update

Bulletin has no description...

RHSA-2026:29020 Red Hat Security Advisory: libpng12 security update

Bulletin has no description...

RHSA-2026:29019 Red Hat Security Advisory: libpng15 security update

Bulletin has no description...

RHSA-2026:28973 Red Hat Security Advisory: nginx security update

Bulletin has no description...

RHSA-2026:25145 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

CVE-2026-53263

creationtimestamp| type| source ---|---|--- 2026-06-25 09:55:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp45zk6ixl2a 2026-07-01 02:44:14+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812 2026-07-06 06:51:55+00:00| seen|...

CVE-2026-53268

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrackirc: fix possible out-of-bounds read When parsing fails after we've matched the command string we should bail out instead of trying to match a different command. This helper should be deprecated, given...

DEBIAN-CVE-2026-53250

In the Linux kernel, the following vulnerability has been resolved: xsk: cache csumstart/csumoffset to fix TOCTOU in xskskbmetadata The TX metadata area resides in the UMEM buffer which is memory-mapped and concurrently writable by userspace. In xskskbmetadata, csumstart and csumoffset are read...

DEBIAN-CVE-2026-53236

In the Linux kernel, the following vulnerability has been resolved: tcp: restrict SOATTACHFILTER to priv users This patch restricts the use of SOATTACHFILTER cBPF on TCP sockets to users with CAPNETADMIN capability. This blocks potential side-channel attack where an unprivileged application...

DEBIAN-CVE-2026-53185

In the Linux kernel, the following vulnerability has been resolved: zram: fix use-after-free in zrambvecwritepartial zramreadpage picks the sync or async backing device read path based on whether the parent bio is NULL. zrambvecwritepartial passes its parent bio down, so for ZRAMWB slots the read...

CVE-2026-12318

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Libraries component in NSS...

Important: Red Hat Security Advisory: runc security update

An update for runc is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Unsafe Dependency Resolution

Overview org.jenkins-ci.plugins:script-security is a package that allows Jenkins administrators to control what in-process scripts can be run by less-privileged users. Affected versions of this package are vulnerable to Unsafe Dependency Resolution via Groovy AST transformation annotations during...

OHIF Viewers DICOM

ADVISORY SUMMARY Successful exploitation of this vulnerability in a custom integration version could allow an attacker to steal an authenticated clinician's token via a crafted link. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of...

GHSA-M99R-2HXC-CP3Q

creationtimestamp| type| source ---|---|--- 2026-06-25 05:43:10+00:00| seen| https://gist.github.com/muhamedfazalps/db2c0e46436e75ee35dd214e14e27b40...

CVE-2026-12300

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bug fixed in Thunderbird 152...

GHSA-9FXM-VC8V-HJ55 vulnerabilities

Vulnerabilities for packages: neo4j, scala, spdx-tools-java, infinispan, flyway, confluent-kafka, druid, strimzi-kafka-operator, thingsboard, spark, management-api-for-apache-cassandra-5.0, kafka, trino, solr, apache-tika, nextflow, akhq, ruby3.4-jrjackson, ruby3.3-jrjackson, dependency-track,...

GHSA-HGJ6-7826-R7M5 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, neo4j, scala, spdx-tools-java, airflow, infinispan, zookeeper, flyway, confluent-kafka, druid, strimzi-kafka-operator, thingsboard, spark, management-api-for-apache-cassandra-5.0, kafka, trino, celeborn, solr, gradle, apache-tika, kserve-modelmesh,...