Threat database

A security update for the Kea DHCP server addresses a crash vulnerability triggered by the interaction between specific client options and subnet selection. This issue is tracked as CVE-2025-40779 and affects Kea versions prior to 3.0.1. The vulnerability has been rated as high severity by Red Hat Product Security. The update to Kea version 3.0.1 resolves this crash issue. The affected products include Red Hat Enterprise Linux 10 and its variants across multiple architectures. No known exploits are reported in the wild.

Red Hat Directory Server is an LDAPv3-compliant directory server. The image is maintained by Red Hat and updated regularly. To pull this container image, run the following command: podman pull registry.redhat.io/dirsrv/dirsrv-container-rhel10:13.1

A security update for ImageMagick addresses multiple vulnerabilities including denial of service, heap buffer overflows, stack buffer overflows, memory leaks, information disclosure, code injection, and security policy bypasses. These issues arise from improper pointer initialization, crafted image files, malformed inputs, and integer overflows among others. The update fixes a broad range of vulnerabilities that could lead to crashes, memory corruption, or unauthorized access. No specific affected versions are stated in the provided data.

This security update provides a functional equivalent of RHSA-2026:4064. The original Red Hat(R) advisory is available from the Red Hat web site at https://access.redhat.com/errata/RHSA-2026:4064.

The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format. Security Fix(es): * libvpx: Heap buffer overflow in libvpx (CVE-2026-2447) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Multiple security vulnerabilities have been identified and fixed in the Linux kernel packages for Red Hat Enterprise Linux versions 9.4 and 9.6 Extended Update Support (EUS). These include use-after-free bugs, double free vulnerabilities, and a bug in IPv6 packet handling. The update addresses issues such as an in-kernel MMIO check flaw, RDMA/rxe use-after-free leading to potential arbitrary code execution, and a double free in the exFAT filesystem that can cause denial of service. The vendor rates the overall security impact as moderate. Systems must be updated and rebooted to apply these fixes.

Multiple heap and global buffer overflow vulnerabilities have been identified in FreeRDP, specifically affecting the xfreerdp client used to connect to various RDP servers. These vulnerabilities are tracked as CVE-2026-22855, CVE-2026-22858, and CVE-2026-22859. Red Hat has issued security advisories providing updated packages to address these issues in Red Hat Enterprise Linux 9.6 Extended Update Support and related products.

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * php: heap-based buffer overflow in array_merge() (CVE-2025-14178) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

These are all security issues fixed in the libpng12-0-1.2.59-6.1 package on the GA media of openSUSE Tumbleweed.

A security update for python-uv addresses CVE-2025-13327, a vulnerability where parsing differentials during processing of specially crafted ZIP archives in package installation can lead to arbitrary code execution. This issue affects SUSE products using python-uv. The vulnerability is rated as high severity. No specific affected versions or patch details are provided in the available data.

Multiple security vulnerabilities have been addressed in Roundcube Webmail stable version 1.6 through updates 1.6.11, 1.6.12, and 1.6.13. These include fixes for a post-authentication remote code execution via PHP object deserialization, cross-site scripting via SVG animate tags, information disclosure through the HTML style sanitizer, CSS injection, and remote image blocking bypass via SVG content. The vendor recommends updating all productive installations of Roundcube 1.6.x to version 1.6.13. Users should back up data before updating.

This update for shim addresses multiple issues including a fix for CVE-2024-2312 related to SBAT metadata for grub.peimage. The update includes various bug fixes, improvements to network boot, loader protocol enhancements, and security improvements such as Authenticode generation and NX policy enforcement. No specific exploit details or active exploitation are reported.

A Improper Access Control vulnerability in the kernel of SUSE SUSE Linux Enterprise Server 12 SP5 breaks nftables, causing firewall rules applied via nftables to not be effective.This issue affects SUSE Linux Enterprise Server: from 9e6d9d4601768c75fdb0bad3fbbe636e748939c2 before 9c294edb7085fb91650bc12233495a8974c5ff2d.

This update for salt fixes the following issues: Changes in salt: - Security issues fixed: * CVE-2025-67724: fixed missing validation of supplied reason phrase (bsc#1254903) * CVE-2025-67725: fixed DoS via malicious HTTP request (bsc#1254905) * CVE-2025-67726: fixed HTTP header parameter parsing algorithm (bsc#1254904) - Fixed KeyError in postgres module with PostgreSQL 17 (bsc#1254325) - Use internal deb classes instead of external aptsource lib - Improved performance of wheel key.finger call (bsc#1240532) - Improved performance of utils.find_json function (bsc#1246130) - Extend warn_until period to 2027

This update for the SUSE Linux Enterprise kernel 6.12.0-160000.8.1 fixes one security issue The following security issue was fixed: - CVE-2025-40130: scsi: ufs: core: Fix data race in CPU latency PM QoS request handling (bsc#1253415).

A vulnerability has been identified within the Rancher Backup Operator, resulting in the leakage of S3 tokens (both accessKey and secretKey) into the rancher-backup-operator pod's logs.

A race condition vulnerability in the Linux kernel's POSIX CPU timers subsystem (CVE-2025-38352) has been fixed. The flaw involves a race between handle_posix_cpu_timers() and posix_cpu_timer_del() functions, which can cause failures in timer deletion and task handling under certain exit conditions. This issue affects multiple Linux distributions including Red Hat Enterprise Linux 10 and SUSE Linux Enterprise. A security update is available and requires a system reboot to apply.

This security update for go1.24-openssl addresses multiple critical vulnerabilities affecting various components such as crypto/tls, net/mail, crypto/x509, encoding/asn1, net/http, archive/tar, net/url, archive/zip, and cmd/go. The issues include memory exhaustion, excessive CPU consumption, denial of service, panic conditions, information leakage, and potential arbitrary code execution. The update fixes these vulnerabilities in version 1.24.13 of go1.24-openssl.

This security update for expat addresses two vulnerabilities: CVE-2026-24515, a NULL dereference caused by failure to copy encoding handler data, and CVE-2026-25210, an integer overflow due to lack of buffer size checking. Both vulnerabilities could lead to stability or security issues in affected systems. The update fixes these issues to improve software reliability and security.

A security update for the Rhino JavaScript engine addresses a vulnerability (CVE-2025-66453) related to the formatting of floating-point numbers to strings. This flaw could potentially lead to a denial-of-service (DoS) condition. The update to version 1.7.15.1 fixes this issue.