298 matches found
RLSA-2026:97090 Important: subscription-manager-cockpit security update
Subscription Manager Cockpit UI Security Fixes: lodash: lodash: Arbitrary code execution via untrusted input in template imports CVE-2026-4800 lodash: Lodash: Prototype pollution allows deletion of built-in prototype properties via array path bypass CVE-2026-2950 For more details about the securi...
subscription-manager-cockpit security update
An update is available for subscription-manager-cockpit. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Subscription Manager Cockpit UI Security Fixes: lodash:...
RLSA-2026:97514 Important: subscription-manager-cockpit security update
Subscription Manager Cockpit UI Security Fixes: lodash: lodash: Arbitrary code execution via untrusted input in template imports CVE-2026-4800 lodash: Lodash: Prototype pollution allows deletion of built-in prototype properties via array path bypass CVE-2026-2950 For more details about the securi...
subscription-manager-cockpit security update
An update is available for subscription-manager-cockpit. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Subscription Manager Cockpit UI Security Fixes: lodash:...
Important: Red Hat Security Advisory: subscription-manager-cockpit security update
An update for subscription-manager-cockpit is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Important: Red Hat Security Advisory: subscription-manager-cockpit security update
An update for subscription-manager-cockpit is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...
RHEL 10 : subscription-manager-cockpit (RHSA-2026:97090)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:97090 advisory. Subscription Manager Cockpit UI Security Fixes: lodash: lodash: Arbitrary code execution via untrusted input in template imports...
Rocky Linux 9 [CIQ] Security Update: libdnf-plugin-subscription-manager / etc (crlsa-2023_4708)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20234708 advisory. subscription-manager: inadequate authorization of com.redhat.RHSM1 D-Bus interface allows local users to modify configuration CVE-2023-3899 Tenable has extracted th...
Rocky Linux 8 [CIQ] Security Update: dnf-plugin-subscription-manager / etc (crlsa-2023_4706)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20234706 advisory. subscription-manager: inadequate authorization of com.redhat.RHSM1 D-Bus interface allows local users to modify configuration CVE-2023-3899 Tenable has extracted th...
Rocky Linux 8.6 [CIQ] Security Update: dnf-plugin-subscription-manager / etc (ciqsa-2026_0033)
The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260033 advisory. This advisory aggregates security fixes for the subscription-manager SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2023-3899. Tenable has extracted the preceding...
EUVD-2026-68359
A vulnerability was identified in Systerel S2OPC up to 1.7.3. The impacted element is the function monitoreditemeventfiltertreatmentbsiniteventfilterctxandresult of the file src/ClientServer/services/bgenc/subscriptionmgr.c. Such manipulation of the argument EventFilter leads to use after free. T...
RHSA-2026:53416 Red Hat Security Advisory: host-metering security update
Bulletin has no description...
Oracle Linux 10 : cockpit (ELSA-2026-21676)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-21676 advisory. 356.2-1.0.1 - Storage: Enable btrfs support Orabug: 37464632 - Replaced upstream urls in documentation with oracle links Orabug: 36528753 - Drop...
cockpit security update
356.2-1.0.1 - Storage: Enable btrfs support Orabug: 37464632 - Replaced upstream urls in documentation with oracle links Orabug: 36528753 - Drop subscription-manager-cockpit requirement for ol Orabug: 34681110 - Remove duplicate reference to server in cockpit Orabug: 34030494 - Update documentati...
Oracle Linux 9 : cockpit (ELSA-2026-21468)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-21468 advisory. 356.2-1.0.1 - Apply the patch for duplicate reference Orabug: 39250109 - Storage: Enable btrfs support Orabug: 37464632 - Replaced upstream urls in documentati...
cockpit security update
356.2-1.0.1 - Apply the patch for duplicate reference Orabug: 39250109 - Storage: Enable btrfs support Orabug: 37464632 - Replaced upstream urls in documentation with oracle links Orabug: 36528753 - Drop subscription-manager-cockpit requirement for ol Orabug: 34681110 - Remove duplicate reference...
cockpit security update
310.8-1.0.1 - Fixed cockpitwst selinux issue for tmpfs Orabug: 36013589 - Move update-motd out of cockpitwst context Orabug: 36013589 - Update documentation links Orabug: 34706402 - Drop subscription-manager-cockpit requirement for ol Orabug: 34681110 - Remove duplicate reference to server in...
GHSA-7GCJ-PHFF-2884 Signal K Server has an Unauthenticated Regular Expression Denial of Service (ReDoS) via WebSocket Subscription Paths
Summary The SignalK server is vulnerable to an unauthenticated Regular Expression Denial of Service ReDoS attack within its WebSocket subscription handling logic. By injecting unescaped regex metacharacters into the context parameter of a stream subscription, an attacker can force the server's...