CLSA-2025-1758154333 TuxCare security update for paramiko (1 CVE)

TuxCare rebuilt paramiko to address 1 CVE. Fixed in 3.0.0.post1+tuxcare...

CLSA-2025-1764634062 TuxCare security update for org.springframework (2 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 2 CVEs. Fixed in 5.3.29-tuxcare.1...

Security update for kubevirt

This update for kubevirt fixes the following issues: Security update correcting a CVE over-claim from the previous update, verified by auditing the fix code actually present in the vendored tree: CVE-2026-39821 bsc1266575: the previous entry claimed this fixed by the golang.org/x/net v0.55.0...

RHSA-2026:49775 Red Hat Security Advisory: libsolv security update

Bulletin has no description...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6output CVE-2025-40158 In the Linux kernel, the following vulnerability has been resolved: xfrm: Wait for RCU readers during policy netns exit CVE-2026-43091 In the Linux kernel, the following...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6output CVE-2025-40158 In the Linux kernel, the following vulnerability has been resolved: xfrm: Wait for RCU readers during policy netns exit CVE-2026-43091 In the Linux kernel, the following...

Important Photon OS Security Update - PHSA-2026-5.0-92-0939

Updates of 'python3-tornado' packages of Photon OS have been released...

CVE-2026-18667 Sensor Proxy Version 1.4.2 Fixes One Vulnerability

A vulnerability in Tenable Sensor Proxy allows a remote attacker to execute code with elevated privileges by inducing an operator to connect the sensor to an attacker-controlled host...

RHSA-2026:49525 Red Hat Security Advisory: perl-Archive-Tar security update

Bulletin has no description...

MiracleLinux 8 : coreutils-8.30-20.el8_10 (AXBA:2026-1420:03)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXBA:2026-1420:03 advisory. - GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop -t...

UBUNTU-CVE-2026-65981

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, a server using --mobility authenticates a resumed REFRESH request with the resuming user's credentials but does not verify that identity against the original allocation owner, allowing an authenticated attacker...

CVE-2025-67650 Authenticated SQL Injection in PHP Jabbers scripts

An authenticated SQL injection vulnerability has been identified in multiple PHP Jabbers scripts. Improper neutralization of input provided by an authenticated user into parameters responsible for sorting functions allows an attacker to perform SQL Injection attacks. This issue was fixed in the...

Fedora 43 : valkey (2026-9de44775c7)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9de44775c7 advisory. Valkey 8.1.9 - Released Tue 21 July 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible...

SUSE CVE-2026-54096

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.7, POST /api/share/ accepts an authenticated request for an arbitrary path and stores a public share record without checking whether the target fi...

ROOT-APP-NPM-GHSA-CMWH-PVXP-8882 GHSA-cmwh-pvxp-8882 in @rootio/dompurify - Patched by Root

Root has patched GHSA-cmwh-pvxp-8882 in the @rootio/dompurify package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-49978 CVE-2026-49978 in @rootio/dompurify - Patched by Root

Root has patched CVE-2026-49978 in the @rootio/dompurify package for Root:npm. Multiple fixed versions available...

CLEANSTART-2026-IL03064 Security fixes in minio-operator 6.0.4-r3

Package minio-operator version 6.0.4-r3 fixes 4 vulnerabilities: ghsa-mh63-6h87-95cp, ghsa-29wx-vh33-7x7r, CVE-2025-30204, CVE-2024-51744...

CLEANSTART-2026-MR47325 Security fixes in helm 3.20.2-r0

Package helm version 3.20.2-r0 fixes 1 vulnerabilities: CVE-2026-33186...

CLEANSTART-2026-HT01746 Security fixes in velero-plugin-for-csi 0.6.3-r1

Package velero-plugin-for-csi version 0.6.3-r1 fixes 2 vulnerabilities: CVE-2025-30204, CVE-2024-51744...

Security update for apptainer

This update for apptainer fixes the following issues: CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266656. CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid...