Rocky Linux 8.6 [CIQ] Security Update: lemon / lemon-debuginfo / sqlite / sqlite-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0069)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260069 advisory. This advisory aggregates security fixes for the sqlite SRPM in CIQ LTS 8.6. It addresses 32 CVEs: CVE-2020-15358, CVE-2019-19880, CVE-2020-13435,...

Rocky Linux 8.6 [CIQ] Security Update: libuv / libuv-debuginfo / libuv-debugsource / libuv-devel Multiple Vulnerabilities (ciqsa-2026_0094)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260094 advisory. This advisory aggregates security fixes for the libuv SRPM in CIQ LTS 8.6. It addresses 2 CVEs: CVE-2024-24806, CVE-2020-8252. Tenable has extracted the...

Rocky Linux 8.6 [CIQ] Security Update: bind9.16 / bind9.16-chroot / bind9.16-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0007)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260007 advisory. This advisory aggregates security fixes for the bind9.16 SRPM in CIQ LTS 8.6. It addresses 34 CVEs: CVE-2009-0696, CVE-2018-5738, CVE-2006-4095,...

Rocky Linux 8.6 [CIQ] Security Update: systemd / systemd-container / systemd-container-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0266)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260266 advisory. This advisory aggregates security fixes for the systemd SRPM in CIQ LTS 8.6. It addresses 6 CVEs: CVE-2017-9445, CVE-2020-1712, CVE-2018-6954,...

Rocky Linux 9.2 [CIQ] Security Update: curl / curl-debuginfo / curl-debugsource / curl-minimal / etc Multiple Vulnerabilities (ciqsa-2026_0406)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260406 advisory. This advisory aggregates security fixes for the curl SRPM in CIQ LTS 9.2. It addresses 105 CVEs: CVE-2022-27775, CVE-2022-32221, CVE-2019-5481,...

Rocky Linux 9.2 [CIQ] Security Update: systemd / systemd-boot-unsigned / systemd-boot-unsigned-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0497)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260497 advisory. This advisory aggregates security fixes for the systemd SRPM in CIQ LTS 9.2. It addresses 12 CVEs: CVE-2025-4598, CVE-2018-15688, CVE-2019-6454,...

Rocky Linux 9.6 [CIQ] Security Update: expat / expat-debuginfo / expat-debugsource / expat-devel Multiple Vulnerabilities (ciqsa-2026_1446)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261446 advisory. This advisory aggregates security fixes for the expat SRPM in CIQ LTS 9.6. It addresses 28 CVEs: CVE-2022-43680, CVE-2022-22826, CVE-2022-25313,...

Rocky Linux 9.2 [CIQ] Security Update: grafana / grafana-debuginfo / grafana-debugsource / grafana-selinux Multiple Vulnerabilities (ciqsa-2026_0425)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260425 advisory. This advisory aggregates security fixes for the grafana SRPM in CIQ LTS 9.2. It addresses 30 CVEs: CVE-2020-12459, CVE-2022-21698, CVE-2022-21673,...

Rocky Linux 9.2 [CIQ] Security Update: libfastjson / libfastjson-debuginfo / libfastjson-debugsource (ciqsa-2026_0442)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260442 advisory. This advisory aggregates security fixes for the libfastjson SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2020-12762. Tenable has extracted the preceding descripti...

Rocky Linux 8.6 [CIQ] Security Update: libjpeg-turbo / libjpeg-turbo-debuginfo / libjpeg-turbo-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_0078)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260078 advisory. This advisory aggregates security fixes for the libjpeg-turbo SRPM in CIQ LTS 8.6. It addresses 7 CVEs: CVE-2020-17541, CVE-2013-6630, CVE-2013-6629,...

virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before use

downloadwheel runs pip download and hands the result straight to the seeder, with nothing checking the bytes it gets back. The embedded pip and setuptools wheels carry a BUNDLESHA256 that virtualenv checks on every load, but a wheel fetched over the network for the periodic-update feature or the...

GitPython submodule update path traversal can write outside the repository

Affected: GitPython 3.1.61 latest release and main — git/objects/submodule/base.py. git diff 3.1.61 origin/main -- git/objects/submodule/ is empty, so both are identical here. --- The gap The fix for GHSA-hmq2-w58f-27jc added Submodule.validatedname and wired it into update and five siblings,...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nodejs24: nodejs24-24.21.0-1.2.hum1 aarch64, x8664 nodejs24-bin-24.21.0-1.2.hum1 noarch nodejs24-devel-24.21.0-1.2.hum1 aarch64, x8664 nodejs24-docs-24.21.0-1.2.hum1 noarch...

CLSA-2026-1790807354 TuxCare security update for brace-expansion (1 CVE)

TuxCare rebuilt brace-expansion to address 1 CVE. Fixed in 2.0.2-tuxcare.1...

CLSA-2026-1790801785 TuxCare security update for vite (3 CVEs)

TuxCare rebuilt vite to address 3 CVEs. Fixed in 5.0.12-tuxcare.1...

CLEANSTART-2026-PA36556 If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources

Security vulnerability affects the containerd package. If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources...

CVE-2026-75969 PTZOptics Missing Authentication in Firmware Upload

Missing authentication for critical function vulnerability for all PTZOptics cameras and the Firmware Upgrade Tool - Firmware Update modules. A missing authentication vulnerability in the firmware update mechanism of affected PTZOptics cameras allows an unauthenticated user to install modified...

CVE-2026-100265

In JetBrains Rider before 2026.2.1 aI Assistant could auto-update third-party skills without user confirmation...

CVE-2026-100265

In JetBrains Rider before 2026.2.1 aI Assistant could auto-update third-party skills without user confirmation...

CVE-2026-100265

JetBrains Rider versions prior to 2026.2.1 are affected by a vulnerability where the AI Assistant could automatically update third-party skills without requiring explicit user confirmation. The provided documents do not specify the underlying root cause, the specific impact beyond unauthorized up...