ALSA-2026:67278 Moderate: perl:5.32 security update

Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fixes: perl: Perl: Incorrect regular expression processing via large regular expressions CVE-2026-13221 For more details about the security issues, including the impac...

ALSA-2026:67155 Moderate: perl security update

Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fixes: perl: Perl: Incorrect regular expression processing via large regular expressions CVE-2026-13221 For more details about the security issues, including the impac...

CVE-2026-90806: Missing Authorization

A vulnerability has been found in DjangoCRM django-crm up to 1.2. This vulnerability affects the function BulkUpdateCasesView of the file backend/cases/bulkviews.py of the component Bulk Case Update. The manipulation leads to missing authorization. The attack is possible to be carried out remotel...

ALSA-2026:67156 Moderate: perl security update

Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fixes: perl: Perl: Incorrect regular expression processing via large regular expressions CVE-2026-13221 For more details about the security issues, including the impac...

Oracle Linux 9 : ELSA-2026-67165-0: / openssl (ELSA-2026-671650)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-671650 advisory. 3.5.8-1.0.1 - Replace upstream references Orabug: 34340177 3.5.8.openela.0.1 - Add OpenELA specific changes 1:3.5.8-1 - Rebase to OpenSSL 3.5.8...

Oracle Linux 9 : ELSA-2026-67285-0: / rust (ELSA-2026-672850)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-672850 advisory. 1.92.0-2 - Apply libgit2 fix for CVE-2026-53587 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

CVE-2026-54180: Authorization Bypass Through User-Controlled Key

backpack/crud provides Create, Read, Update & Delete CRUD functions for Backpack, a collection of Laravel packages that help users build custom administration panels. From 6.0.0 until 6.8.14 and 7.0.38, the Update, Delete, and Reorder operations resolve records from the unscoped model query inste...

CVE-2026-10542: Authorization Bypass Through User-Controlled Key

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to validate channel action ownership which allows channel managers to update actions in other channels via the channel action update endpoint.. Mattermost Advisory ID: MMSA-2026-00692...

PT-2026-91198

Incorrect Authorization vulnerability in Apache Syncope. An administrator with ClientApp's update entitlement is unable to perform the related operation, while ClientApp's create entitlement is checked both for create and update operations on ClientApp. This issue affects Apache Syncope: from...

rust security update

1.92.0-2 - Apply libgit2 fix for CVE-2026-53587...

rust security update

1.92.0-2 - Apply libgit2 fix for CVE-2026-53587...

Oracle Linux 10 : ELSA-2026-67154-0: / openssl (ELSA-2026-671540)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-671540 advisory. 3.5.8-1.0.1 - Replace upstream references Orabug: 34340177 - Update FIPS provider name Orabug: 35824276 1:3.5.8-1 - Rebase to OpenSSL 3.5.8 Resolves...

openssl security, bug fix, and enhancement update

3.5.8-1.0.1 - Replace upstream references Orabug: 34340177 - Update FIPS provider name Orabug: 35824276 1:3.5.8-1 - Rebase to OpenSSL 3.5.8 Resolves: RHEL-242944 Resolves: RHEL-246254 Resolves: RHEL-246266 Resolves: RHEL-246306 Resolves: RHEL-246437 Resolves: RHEL-246441 Resolves: RHEL-246445...

python-tornado security update

6.5.8-0.1 - Update to 6.5.8 Resolves: RHEL-247281...

python-tornado security update

6.5.8-0.1 - Update to 6.5.8 Resolves: RHEL-247266...

PT-2026-91139

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to validate channel action ownership which allows channel managers to update actions in other channels via the channel action update endpoint.. Mattermost Advisory ID: MMSA-2026-00692...

ALSA-2026:67314 Important: nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 For more details about the security issues, including the impac...

git-lfs security update

3.4.1-13 - Rebuild with new Golang - Resolves: RHEL-241521, RHEL-242322, RHEL-241889...

osbuild-composer security update

176-1.0.3 - Fix CVE-2026-41178, CVE-2026-55677, CVE-2026-25681, CVE-2026-27136, CVE-2026-42502, CVE-2026-39821...

gstreamer1-plugins-base security update

1.16.1-7.0.1 - Update origin URL Orabug: 36209826 1.16.1-7 - Add patch for CVE-2026-85150 Resolves: RHEL-253741 1.16.1-6.1 - Add patch for CVE-2026-18297 Resolves: RHEL-246576...