CLSA-2026-1788216921 TuxCare security update for io.netty (28 CVEs)

TuxCare rebuilt 46 io.netty packages to address 28 CVEs. Fixed in 4.1.79.Final-tuxcare.2...

CLSA-2026-1788215347 TuxCare security update for org.apache.logging.log4j (7 CVEs)

TuxCare rebuilt 23 org.apache.logging.log4j packages to address 7 CVEs. Fixed in 2.11.0-tuxcare.1...

CVE-2026-51739

Incorrect access control in the CloudSrvVersionCheck function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to trigger cloud update checks via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51734

Incorrect access control in the informSlaveUpdate function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to trigger mesh slave update coordination via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

[SECURITY] Fedora 44 Update: bind-9.18.50-2.fc44

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

[SECURITY] Fedora 44 Update: nebula-1.11.1-1.fc44

A scalable overlay networking tool with a focus on performance, simplicity and security...

[SECURITY] Fedora 43 Update: bind-9.18.50-2.fc43

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

[SECURITY] Fedora 43 Update: mqttcli-0.2.8-2.fc43

mqttcli provides two programs pub and sub that allow command-line access to an MQTT broker. sub subscribes to a topic and prints messages received to standard output. pub publishes the provided message to the provided topic. Both programs accept flags that can be provided as a config file...

[SECURITY] Fedora 43 Update: hcloud-1.67.0-1.fc43

A command-line interface for Hetzner Cloud...

CLSA-2026-1788195644 TuxCare security update for axios (5 CVEs)

TuxCare rebuilt axios to address 5 CVEs. Fixed in 1.7.9-tuxcare.4...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: glibc: compat-libpthread-nonshared-2.43-8.4.hum1 aarch64, x8664 glibc-2.43-8.4.hum1 aarch64, x8664 glibc-all-langpacks-2.43-8.4.hum1 aarch64, x8664 glibc-benchtests-2.43-8.4.hum1 aarch64, x8664...

BIT-KEYCLOAK-2026-18573 Keycloak-services: keycloak-services: client access-type policy condition bypass during client update

A flaw was found in the keycloak-services component of Keycloak, which is used for managing authentication and authorization flows. The issue occurs when a realm administrator configures client policies to enforce specific authentication requirements on confidential clients. Due to improper...

Important: Red Hat Security Advisory: OpenShift Virtualization v4.16 Images

Red Hat OpenShift Virtualization release v4.16 is now available with updates to packages and images that fix several bugs and add enhancements. OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: hdf5: hdf5-2.2.0-0.1.1.hum1 aarch64, x8664 hdf5-devel-2.2.0-0.1.1.hum1 aarch64, x8664 hdf5-mpich-2.2.0-0.1.1.hum1 aarch64, x8664 hdf5-mpich-devel-2.2.0-0.1.1.hum1 aarch64, x8664...

Important: Red Hat Security Advisory: Red Hat AI Inference Server 3.2.2 (CUDA)

Red Hat AI Inference Server 3.2.2 CUDA is now available. Red Hat® AI Inference Server...

FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read

A heap out-of-bounds read vulnerability in FreeRDP allows an unauthenticated, malicious RDP server to cause a Denial of Service. By sending a specially crafted glyph fragment update, the server forces the client to read beyond its allocated memory, crashing the application...

FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders

A flaw was found in FreeRDP. When the async-update feature is enabled, a malicious or compromised Remote Desktop Protocol RDP server can send specially crafted update orders. This can lead to an out-of-bounds read, potentially exposing sensitive information or causing the client application to...

FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read

A heap out-of-bounds read vulnerability in FreeRDP allows an unauthenticated, malicious RDP server to cause a Denial of Service. By sending a specially crafted glyph fragment update, the server forces the client to read beyond its allocated memory, crashing the application...

FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders

A flaw was found in FreeRDP. When the async-update feature is enabled, a malicious or compromised Remote Desktop Protocol RDP server can send specially crafted update orders. This can lead to an out-of-bounds read, potentially exposing sensitive information or causing the client application to...