Open Source Vulnerabilities

gpsd, gpsd-clients, python3-gpsd

Important: gpsd security update

thunderbird

Important: thunderbird security update

thunderbird

Important: thunderbird security update

thunderbird

Important: thunderbird security update

microcode_ctl

Important: microcode_ctl security, bug fix, and enhancement update

redis, redis-devel, redis-doc

Important: redis security, bug fix, and enhancement update

pam, pam-devel, pam-docs

Moderate: pam security update

expat, expat-devel

Moderate: expat security update

expat, expat-devel

Moderate: expat security update

valkey, valkey-devel

Important: valkey security, bug fix, and enhancement update

glib2, glib2-devel, glib2-doc, glib2-static, glib2-tests

Moderate: glib2 security update

glib2, glib2-devel, glib2-doc, glib2-static, glib2-tests

Moderate: glib2 security update

xz, xz-devel, xz-libs, xz-lzma-compat

Moderate: xz security update

buildah, buildah-tests

Important: buildah security update

python-pypdf

python313-pypdf-6.16.2-3.1 on GA media

python-nbconvert

jupyter-nbconvert-7.17.1-2.1 on GA media

python-geopy

python313-geopy-2.5.0-1.1 on GA media

python-comfyui-frontend-package

python313-comfyui-frontend-package-1.52.7-1.1 on GA media

perl-DBD-Pg

perl-DBD-Pg-3.21.2-1.1 on GA media

mariadb-connector-c

libmariadb-devel-3.4.9-2.1 on GA media

llamacpp

ggml-devel-0.4.0-1.1 on GA media

libheif

gdk-pixbuf-loader-libheif-1.23.4-1.1 on GA media

helm

helm-4.2.4-3.1 on GA media

git-bug

git-bug-0.10.1-7.1 on GA media

ffmpeg-4

ffmpeg-4-4.4.8-5.1 on GA media

corosync

corosync-3.1.10-5.1 on GA media

rclone

rclone-1.75.1-1.1 on GA media

rpcbind

rpcbind-1.2.9-2.1 on GA media

skopeo, skopeo-tests

Important: skopeo security update

python3.14-cryptography

Important: python3.14-cryptography security update

python3.14-cryptography

Important: python3.14-cryptography security update

redis, redis-devel, redis-doc

Important: redis:6 security update

expat, expat-devel

Moderate: expat security update

git-lfs

Important: git-lfs security update

xmlrpc-c, xmlrpc-c-c++, xmlrpc-c-client, xmlrpc-c-client++, xmlrpc-c-devel

Important: xmlrpc-c security update

kernel-rt, kernel-rt-core, kernel-rt-debug, kernel-rt-debug-core, kernel-rt-debug-devel, kernel-rt-debug-modules, kernel-rt-debug-modules-extra, kernel-rt-devel, kernel-rt-modules, kernel-rt-modules-extra

Important: kernel-rt security update

osbuild-composer, osbuild-composer-core, osbuild-composer-worker

Important: osbuild-composer security update

chromium

chromedriver-152.0.7977.82-1.1 on GA media

valkey, valkey-devel

Important: valkey security, bug fix, and enhancement update

389-ds-base, 389-ds-base-devel, 389-ds-base-libs, 389-ds-base-snmp, python3-lib389

Critical: 389-ds-base security, bug fix, and enhancement update

knowns before 0.30.0 Authorization Bypass via Misclassified Code Actions

knowns before 0.30.0 Unauthenticated Management API Exposure

knowns before 0.30.0 Path Traversal via Import Name

knowns before 0.30.0 Path Traversal via code.replace MCP action

knowns before 0.30.0 Arbitrary Code Execution via LSP Binary

knowns through 0.33.0 Server-Side Request Forgery via embedding-models endpoint

knowns before 0.30.0 Path Traversal via templateFile parameter

knowns before 0.30.0 Path Traversal via MCP doc and memory tools

Terminal escape sequence injection in the mix igniter.install confirmation prompt via package metadata

igniter,

Terminal escape sequence injection in the mix igniter.install confirmation prompt via package metadata