Important: kernel security, bug fix, and enhancement update
Important: qt5-qtbase security update
Important: kernel security, bug fix, and enhancement update
Important: gegl04 security update
Important: kernel security, bug fix, and enhancement update
Important: mingw-sqlite security update
Important: xmlrpc-c security update
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.Security Fix(es): FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders (CVE-2026-67301) FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests (CVE-2026-67288) FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read (CVE-2026-67291) FreeRDP: FreeRDP: Heap-buffer-overflow allows arbitrary code execution via crafted RPC response (CVE-2026-55194) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.Security Fix(es): glib: buffer over-read in glib/gvariant-serialiser.c via gvstupleisnormal() (CVE-2026-58010) glib: out-of-bounds read in glib/gdatetime.c:gdatetimegetymd via invalid GDateTime (CVE-2026-58011) glib: buffer over-read in gregexreplace() via glib/gregex.c:stringappend() and gutf8nextchar() (CVE-2026-58012) glib: buffer over-read in glib/giochannel.c via "giochannelreadlinebackend" (CVE-2026-58013) glib: off-by-one error in glib/gkeyfile.c via "gkeyfilegetlocalestringlist" (CVE-2026-58014) glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyringlookupentry and mechanismclientdatareceive (CVE-2026-58015) GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering (CVE-2026-15588) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Important: kernel security, bug fix, and enhancement update
Important: kernel security, bug fix, and enhancement update
Low: mingw-openssl security update
Moderate: libxml2 security update
Important: python3.12 security update
Important: nginx security update
Moderate: cups-filters security update
Important: yggdrasil security update
Important: mysql8.4 security, bug fix, and enhancement update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.Security Fix(es): gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM decoder (CVE-2026-19387) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Important: kernel security, bug fix, and enhancement update
Important: unbound security update
.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.SDK version: 10.0.111Runtime version: 10.0.11Security Fix(es): .NET: .NET Core: .NET Security Feature Bypass Vulnerability (CVE-2026-62899) .NET: .NET Information Disclosure Vulnerability (CVE-2026-62900) .NET: .NET Denial of Service Vulnerability (CVE-2026-62901) .NET: .NET Elevation of Privilege Vulnerability (CVE-2026-62909) Bug Fix(es) and Enhancement(s): Update .NET 10.0 to SDK 10.0.111 and Runtime 10.0.11 [rhel-10.2.z] (JIRA:RHEL-235482) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer.Security Fix(es): gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM decoder (CVE-2026-19387) gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks leading to out-of-bounds read (CVE-2026-19389) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.