Red Hat Security Advisory: perl-URI security update
Red Hat Security Advisory: perl-URI security update
- Update to 0:5.27-3.el10_2.1
PatchFirst · Latest vulnerabilities
Vulnerabilities published for Operating systems in the last 30 days: 6952. Listed in the KEV catalogue: 4.
Vulnerabilities: 161035
Red Hat Security Advisory: perl-URI security update
Red Hat Security Advisory: libsoup security update
Red Hat Security Advisory: postgresql security update
Red Hat Security Advisory: webkit2gtk3 security, bug fix, and enhancement update
Red Hat Security Advisory: webkit2gtk3 security, bug fix, and enhancement update
Red Hat Security Advisory: qt6-qtbase security update
Red Hat Security Advisory: gd security update
Red Hat Security Advisory: gd security update
Red Hat Security Advisory: gd security update
Red Hat Security Advisory: python3.14-urllib3 security update
Red Hat Security Advisory: python3.14-urllib3 security update
Red Hat Security Advisory: rsyslog security update
Red Hat Security Advisory: gegl04 security update
Red Hat Security Advisory: xorg-x11-server security update
Red Hat Security Advisory: openssl security update
This update for rpcbind fixes the following issue: - CVE-2026-94640: unbounded memory allocation in statistics tracking allows for unauthenticated remote denial of service (bsc#1282326).
This update for docker fixes the following issues: Security issues fixed: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265782). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266625). - CVE-2026-39984: github.com/sigstore/timestamp-authority/v2/pkg/verification: improper certificate validation can be used to bypass some authorization controls (bsc#1262346). - CVE-2026-41567: arbitrary code execution with full daemon privileges when a user uploads a compre
This update for helm fixes the following issues: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265758). - CVE-2026-35204: github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary file write via specially crafted plugin (bsc#1261939). - CVE-2026-35205: github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary code execution due to insufficient plugin provenance verification (bsc#1261935). - CVE-2026-35206: github.com/helm/helm: Helm: Files written to unexpected directory via specially crafted Chart (bsc#1261938). - CVE-2026-41178: go.opentelemetry.io/otel/baggage,go
This update for google-osconfig-agent fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283672). Changes for google-osconfig-agent: - Update to version 20260928.01 * scalibr linux new metadata support (#1038) * Fix failing to report REBOOTING state during postPatchReboot due to context canceled for Windows VMs (#1055) * Fix os/snap extractor usage (#1053) - Update github.com/klauspost/compress to v1.18.7 (bsc#1283672, CVE-2026-63209) * bump grpc package to new version (#1057) * bump
This update for wpa_supplicant fixes the following issue: - CVE-2026-78807: Security bypass via missing PMKSA validation (bsc#1280914).
Check your installed stack and versions against the current vulnerability feeds.