News that matters, without the noise.

RHSA-2026:42875: Important: RHEL AI 3.5 RPM runtime CVE fix – aom

AIPCC Security Alerts identified CVEs in the 3.5 release of base-images. The CVE(s) are listed with a severity

CVE-2026-3182

Medium Severity Description Zohocorp ManageEngine Endpoint Central versions before 11.4.2528.34 are affected by cleartext transmission of sensitive information

CVE-2026-15927

Medium Severity Description A flaw was found in Red Hat Quay’s repository-level mirror configuration feature. The POST and

CVE-2026-16266

Medium Severity Description Versions of the package mongo-object before 3.0.3 are vulnerable to Prototype Pollution via the expandKey()

Beyond the Model: Harnessing Frontier AI for Stronger Cyber Defense

USN-8558-1: ImageMagick vulnerabilities

It was discovered that ImageMagick did not limit mutual references between MVG files. An attacker could possibly use

USN-8563-2: nginx regression

USN-8563-1 fixed vulnerabilities in nginx. One of the fixes introduced ABI changes that could cause issues with external

USN-8572-1: Wget vulnerability

It was discovered that Wget did not properly validate the IP address provided in an FTP PASV response

USN-8573-1: libde265 vulnerabilities

It was discovered that libde265 did not properly manage memory under certain circumstances. An attacker could possibly use

RHSA-2026:42098: Moderate: Red Hat JBoss Enterprise Application Platform 8.1.7 XP 6.0.5.GA release

JBoss EAP XP 6.0.5.GA release on the EAP 8.1 base. See references for release notes.

USN-8570-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the

USN-8567-1: Linux kernel vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit