Semantic MediaWiki versions from 2.5.0 up to but not including 7.4.1 contain a stored cross-site scripting (XSS) vulnerability. This flaw exists in the ValueFormatter::getFormattedSubject() function, which improperly renders property label segments after a literal non-breaking space ( ) as unescaped markup. Users with page-edit rights can exploit this by setting a preferred property label containing a malicious img onerror payload. This payload executes when any user, including administrators, views the Special:Browse page or accesses the smwbrowse API.
Semantic MediaWiki versions from 2.4.0 up to but not including 7.4.1 contain a reflected cross-site scripting (XSS) vulnerability in the TimeValueFormatter::getCaptionFromFreeFormat() function. This function outputs free-format date captions in HTML without proper escaping, allowing unauthenticated attackers to craft malicious Special:Ask URLs that include HTML markup. When a logged-in user accesses such a URL, the embedded script executes in their browser session. The vulnerability is fixed in version 7.4.1.
Semantic MediaWiki versions from 3.0.0 up to but not including 7.4.1 have an uncontrolled recursion vulnerability in the ElasticStore ConceptDescriptionInterpreter. This flaw allows users with page-edit rights to create mutually referencing concept pages, which can cause concept page views, Special:Ask queries, or api.php action=ask queries to exhaust PHP memory or stack. The issue is fixed in version 7.4.1.
Semantic MediaWiki versions from 2.5.0 up to but not including 7.4.1 have a missing authorization vulnerability. This flaw allows editors without the edit-protection right to lock pages by adding an 'Is edit protected' annotation. Attackers can exploit this by adding [[Is edit protected::true]] to pages or widely transcluded templates, causing the TitleQuickPermissions hook to block other editors and administrators from editing, moving, or deleting those pages indefinitely. The vulnerability is fixed in version 7.4.1.
Semantic MediaWiki versions from 3.0.0 up to but not including 7.4.1 contain a stored cross-site scripting (XSS) vulnerability in the DataTables integration. This flaw allows users with page-edit rights to inject HTML entity-encoded markup into data-search or data-filter cell attributes, which can execute scripts in the browsers of viewers, including administrators. The vulnerability is fixed in version 7.4.1.
Semantic MediaWiki versions from 4.2.0 up to but not including 7.4.1 contain a stored cross-site scripting (XSS) vulnerability in the OptionsBuilder::profiles() function. This flaw allows users with the smw-schemaedit permission to inject malicious markup by saving specially crafted FACETEDSEARCH_PROFILE_SCHEMA profile keys or labels. The injected scripts execute for every visitor to the Special:FacetedSearch page, including administrators. The vulnerability is fixed in version 7.4.1.
Multiple critical security vulnerabilities have been identified and fixed in the python-pillow library used in Red Hat Enterprise Linux 8.8. These include heap buffer overflows, denial of service conditions via various memory and recursion issues, argument injection potentially leading to remote code execution, and other memory corruption flaws affecting image processing functions such as TIFF saving, PDF parsing, JPEG decoding, and image transformations.
This Red Hat Security Advisory addresses multiple security vulnerabilities in Mozilla Firefox and Thunderbird, including denial of service, mitigation bypasses, spoofing, privilege escalation, use-after-free, information disclosure, sandbox escapes, race conditions, integer overflows, and incorrect boundary conditions across various components. The update includes bug fixes and enhancements for Firefox ESR 153. The advisory rates the security impact as Important and provides a comprehensive list of CVEs fixed in this update.
Multiple security vulnerabilities have been identified in the python-tornado package used in Red Hat Enterprise Linux 9.2. These include information disclosure via improper handling of credentials during HTTP redirects and several denial of service (DoS) issues caused by uncontrolled gzip decompression, excessive URL-encoded body fields, memory amplification in multipart parsing, and decompression bombs in CurlAsyncHTTPClient. Red Hat has released an important security update addressing these issues in python-tornado version 6.5.10-0.el9_2.1.
CVE-2026-63194 is a high-severity path traversal vulnerability in the bahmni-core OpenMRS module version 0.93. It allows an attacker to write arbitrary files during the admin CSV import process due to insufficient input path validation. This issue has been fixed in version 0.93.1.
CVE-2026-63192 is a SQL Injection vulnerability in the bahmni-core module of Bahmni, specifically affecting version 0.93. An attacker with authenticated access could exploit this flaw to exfiltrate sensitive data from the database. The issue has been addressed and patched in version 0.93.1.
Multiple security vulnerabilities affecting the Real Time Linux Kernel (kernel-rt) packages in Red Hat Enterprise Linux 8 have been addressed in an important security update. The update fixes several use-after-free issues, denial of service vulnerabilities, and other kernel bugs that could impact system stability and security. A reboot is required to apply the update. Red Hat strongly recommends applying these fixes promptly to maintain system security.
Two security vulnerabilities have been identified in the python-urllib3 library used in Red Hat Enterprise Linux 9.6 Extended Update Support. The first vulnerability (CVE-2026-97689) allows denial of service via unbounded memory allocation in the chunk parser. The second vulnerability (CVE-2026-97687) enables traffic interception through HTTPS proxy TLS configuration override. Red Hat has issued an important security advisory with updated python-urllib3 packages to address these issues.
A security vulnerability (CVE-2026-97417) has been identified in the Linux kernel's netfilter nf_conntrack component, specifically in the tcp_sack() function. This flaw involves improper handling of unaligned data, addressed by using get_unaligned_be32(). Red Hat has released a kernel security update for Red Hat Enterprise Linux 6 Extended Lifecycle Support to fix this issue. The update requires a system reboot to take effect. Red Hat rates this update as important for security and advises prompt application of the patch to maintain system security.
A security update for OpenSSL addresses a vulnerability identified as CVE-2026-84782 affecting the compat-openssl component. The flaw involves DTLS retransmitting handshake messages from a stale buffer offset. This issue is rated as having an important security impact by Red Hat and affects Red Hat Enterprise Linux Server Extended Life Cycle Support Extension 6. A patch is available in the updated OpenSSL packages provided by Red Hat.