RHSA-2026:52395 Red Hat Security Advisory: postgresql security update

Bulletin has no description...

RHSA-2026:52394 Red Hat Security Advisory: nodejs-nodemon security update

Bulletin has no description...

RHSA-2026:52392 Red Hat Security Advisory: xorg-x11-server-Xwayland security update

Bulletin has no description...

RHSA-2026:52393 Red Hat Security Advisory: mod_md security update

Bulletin has no description...

RHSA-2026:52391 Red Hat Security Advisory: osbuild-composer security update

Bulletin has no description...

RHSA-2026:52390 Red Hat Security Advisory: osbuild-composer security update

Bulletin has no description...

CLSA-2026-1786356355 TuxCare security update for 75 packages (2 CVEs)

TuxCare rebuilt 75 packages to address 2 CVEs. Fixed in 9.4.24.v20191120-tuxcare.4...

CLSA-2026-1786355374 TuxCare security update for angular-sanitize (8 CVEs)

TuxCare rebuilt angular-sanitize to address 8 CVEs. Fixed in 1.5.11-tuxcare.1...

Moderate: Red Hat Security Advisory: libarchive security update

An update for libarchive is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CLSA-2026-1786348732 TuxCare security update for org.springframework.security (2 CVEs)

TuxCare rebuilt 19 org.springframework.security packages to address 2 CVEs. Fixed in 6.2.7-tuxcare.2...

CLSA-2026-1786348544 TuxCare security update for org.springframework (2 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 2 CVEs. Fixed in 5.3.27-tuxcare.7...

CVE-2026-18030

The BricksForge WordPress plugin before 3.1.8.8 does not verify the identity of the requester when processing a password change submitted through one of its form actions, allowing unauthenticated attackers to set an arbitrary password for any user, including administrators, and take over their...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: hwrng: core – Use RCU and workstruct to fix race conditions Currently, the hwrngfill function is not cleared until the hwrngfillfn thread exits. Since hwrngunregister reads hwrngfill outside of the rngmutex lock, a concurrent...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: Wifi: ath11k: Fixed an issue where the RCU stall occurred during the processing of the monitor destination ring. During this process, MSDUs are retrieved from the link descriptor based on the corresponding bufid. However,...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: md: fixed rcu protection in mdwakeupthread We attempted to use RCU to protect the pointer “thread”, but passed the value directly when calling mdwakeupthread. This means that the RCU pointer was acquired before rcureadlock was...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: smb: client: prevented races in -queryinterfaces It was possible for two query interfaces to simultaneously attempt to update the interfaces. This issue can be avoided by checking and updating ifacelastupdate under ifacelock...

Astra Linux – Vulnerability in Python 3.11

DISPUTED: The project has clarified that the documentation was incorrect, and that pkgutil.getdata has the same security model as open. The documentation has been updated to clarify this point. There is no vulnerability in the function if the intended security model is followed. pkgutil.getdata d...

Astra Linux – Vulnerability in Firefox and Thunderbird

Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Futex: Do not leak the robustlist pointer during the exec race The functions sysgetrobustlist and compatgetrobustlist use ptracemayaccess to check whether the calling task is allowed to access another task’s robustlist pointer...