CLSA-2026-1790685464 TuxCare security update for org.springframework.data (3 CVEs)

TuxCare rebuilt 5 org.springframework.data packages to address 3 CVEs. Fixed in 3.5.12-tuxcare.1...

Important: Red Hat Security Advisory: Multicluster Global Hub 1.6.6 security update

Multicluster Global Hub v1.6.6 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux for NVIDIA. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Important: Red Hat Security Advisory: cjose security update

An update for cjose is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

ROOT-OS-ALPINE-320-CVE-2026-60005 CVE-2026-60005 in nginx - Patched by Root

Root has patched CVE-2026-60005 in the nginx package for Root:Alpine:3.20. Multiple fixed versions available...

ROOT-OS-ALPINE-318-CVE-2023-48233 CVE-2023-48233 in vim - Patched by Root

Root has patched CVE-2023-48233 in the vim package for Root:Alpine:3.18. Multiple fixed versions available...

CVE-2026-8065

An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to upload arbitrary firmware through a crafted POST request. Successful exploitation could allow the attacker to modify device functionality or...

CLSA-2026-1790676372 TuxCare security update for morgan (1 CVE)

TuxCare rebuilt morgan to address 1 CVE. Fixed in 1.5.3-tuxcare.4...

ROOT-OS-ALPINE-319-CVE-2024-50382 CVE-2024-50382 in botan - Patched by Root

Root has patched CVE-2024-50382 in the botan package for Root:Alpine:3.19. Multiple fixed versions available...

ROOT-OS-ALPINE-318-CVE-2023-38471 CVE-2023-38471 in avahi - Patched by Root

Root has patched CVE-2023-38471 in the avahi package for Root:Alpine:3.18. Multiple fixed versions available...

CVE-2026-8065

An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to upload arbitrary firmware through a crafted POST request. Successful exploitation could allow the attacker to modify device functionality or...

EUVD-2026-88666

An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to upload arbitrary firmware through a crafted POST request. Successful exploitation could allow the attacker to modify device functionality or...

CVE-2026-8065

An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to upload arbitrary firmware through a crafted POST request. Successful exploitation could allow the attacker to modify device functionality or...

CVE-2026-8065

The Hitachi Energy RTU500 contains an authentication bypass vulnerability in its firmware update endpoint . An unauthenticated attacker can exploit this by sending a crafted POST request to upload arbitrary firmware . Successful exploitation allows the attacker to modify device functionality or c...

CLSA-2026-1790673455 TuxCare security update for fast-uri (2 CVEs)

TuxCare rebuilt fast-uri to address 2 CVEs. Fixed in 2.4.5-tuxcare.2...

CLSA-2026-1790673431 TuxCare security update for pacote (1 CVE)

TuxCare rebuilt pacote to address 1 CVE. Fixed in 19.0.2-tuxcare.1...

CLSA-2026-1790671318 TuxCare security update for django (2 CVEs)

TuxCare rebuilt django to address 2 CVEs. Fixed in 5.0.post15+tuxcare...

CVE-2026-91012 Apache Karaf: Path Traversal in Config Service Allows Manager-to-Admin Privilege Escalation

org.apache.karaf.config.core.impl.ConfigRepositoryImplupdatepid, properties, which backs the "config" MBean and the config: shell commands, derives the file it writes a configuration to from caller-supplied input without checking that the result stays inside $karaf.etc: if the submitted property...

CVE-2026-91012 Apache Karaf: Path Traversal in Config Service Allows Manager-to-Admin Privilege Escalation

org.apache.karaf.config.core.impl.ConfigRepositoryImplupdatepid, properties, which backs the "config" MBean and the config: shell commands, derives the file it writes a configuration to from caller-supplied input without checking that the result stays inside $karaf.etc: if the submitted property...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.16 bug fix and security update

Red Hat OpenShift Container Platform release 4.22.16 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...