kernel security, bug fix, and enhancement update

5.14.0-687.30.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

Introducing Veeam Updater for Windows-based Veeam Backup & Replication Deployments

Purpose Starting with Veeam Backup & Replication 13.1, a new Veeam Updater service is included for all new and upgraded Windows-based deployments. This service is automatically installed and provides built-in automated update management. Previously, this feature was only available for Linux-based...

TencentOS Server 4: nodejs-nodemon (TSSA-2026:0762)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0762 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Critical: Red Hat Security Advisory: multicluster engine for Kubernetes v2.10.4 security update

Red Hat multicluster engine for Kubernetes v2.10 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base scor...

OPENSUSE-SU-2026:21470-1 Security update for java-21-openjdk

This update for java-21-openjdk fixes the following issues: - CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize bsc1264994. - CVE-2026-46917: partial denial of service via TLS bsc1272223. - CVE-2026-46968: unauthorized creation, deletion or modification...

WordPress Facturación Electrónica Costa Rica plugin <= 2.0.2 - Cross-Site Request Forgery to Plugin Settings Update vulnerability

Cross-Site Request Forgery to Plugin Settings Update vulnerability discovered by swat in WordPress Plugin Facturación Electrónica Costa Rica versions = 2.0.2...

Security Bulletin: Cargo in IBM Open SDK for Rust on AIX uses a vulnerable version of gix

Summary The cargo package manager in IBM Open SDK for Rust on AIX 1.92.0.2 and 1.94.0.0 uses gix and gix-submodule crates that are vulnerable to command injection. Vulnerability Details CVEID:CVE-2026-40034 DESCRIPTION: gix-submodule before 0.29.0 gitoxide before 0.5.21, gix before 0.84.0...

MGASA-2026-0306 Updated libslirp packages fix a security vulnerability

The updated packages fix a security vulnerability: TCP URG OOB Read Information Leak. CVE-2026-9539...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.31 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.31 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.31 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.31 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

SUSE-SU-2026:3342-1 Security update for helm

This update for helm fixes the following issues: Update to version 3.21.3. - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266598. - CVE-2026-56852: golang.org/x/text/unicode/norm: handling inp...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.7 bug fix and security update

Red Hat OpenShift Container Platform release 4.22.7 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...

Vulnerabilities found in Apple iOS and iPadOS

Apple has addressed several vulnerabilities in various versions of iOS and iPadOS. Various memory management errors, such as use-after-free, buffer overflows, out-of-bounds reads and writes, integer overflows, race conditions, and insufficient input validation, have been fixed. These errors can...

Critical: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: erlang27: erlang27-27.3.4.15-0.1.hum1 aarch64, x8664 erlang27-asn1-27.3.4.15-0.1.hum1 aarch64, x8664 erlang27-commontest-27.3.4.15-0.1.hum1 aarch64, x8664 erlang27-compiler-27.3.4.15-0.1.hum1...

TencentOS Server 3: glibc (TSSA-2026:0772)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0772 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Security update provided to RockyLinux 9 kernel (RLSA-2026:2212, RLSA-2026:1143, RLSA-2026:1617)

Brocade SANnav OVA has provided Security updates for RockyLinux 9 kernel RLSA-2026:2212, RLSA-2026:1143, RLSA-2026:1617 vulnerabilities. Rocky Linux 9 : kernel RLSA-2026:2212 kernel: net: openvswitch: fix nested key length validation in the set action CVE-2025-37789 kernel: Linux kernel:...

Directory Traversal

Overview thorsten/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to Directory Traversal via insufficient sanitization of the existingimage field during category updates. An attacker can delete arbitrary files by exploiti...

Directory Traversal

Overview phpmyfaq/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to Directory Traversal via insufficient sanitization of the existingimage field during category updates. An attacker can delete arbitrary files by exploiti...

CVE-2026-64741

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.6 and iPadOS 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to read a persistent device identifier...

CVE-2026-64734

The issue was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted contact may leak sensitive data...