Security Notices

Security Notices
MediaTek November Bulletin Covers Modem and Chipset VulnerabilitiesNew!!
11/01/2026

MediaTek lists modem and chipset flaws in its November bulletin. Map device firmware to affected chipsets, obtain OEM fixes, and retain update evidence.

Read this guide
Security Notices
Red Hat Updates RHEL 9 and 10 Kernels for IPv4 TCP and Other FlawsNew!!
11/01/2026

Red Hat updates rhel9 10 kernel packages. Match the exact support stream, apply the signed fixes, validate operations, and retain evidence.

Read this guide
Security Notices
Apache Wicket Fixes Authorization, Session, Upload, and XSS FlawsNew!!
11/01/2026

Apache Wicket fixes authorization, session, upload, and XSS flaws. Match components and versions, upgrade the affected branch, and test access controls.

Read this guide
Security Notices
Gitea 28.3.0 Fixes Token Scope, OAuth2, and Actions VulnerabilitiesNew!!
11/01/2026

Gitea 28.3.0 fixes token, OAuth2, and Actions flaws. Match instance scope, upgrade, validate private-access boundaries, and retain evidence.

Read this guide
Security Notices
Red Hat OpenJDK 17 Update Addresses 36 CVEs on RHEL 9New!!
10/31/2026

Red Hat updates OpenJDK 17 for RHEL 9. Match the supported stream, install advisory packages, validate Java workloads, and retain remediation evidence.

Read this guide
Security Notices
AWS Kinesis Producer Library 1.0.8 Fixes Credential ExposureNew!!
10/31/2026

AWS Kinesis Producer Library 1.0.8 fixes credential exposure. Upgrade producers, rotate exposed credentials, restrict logs, validate, and retain evidence.

Read this guide
Security Notices
Delinea Secret Server 12.3.1 Fixes Three Access FlawsNew!!
10/30/2026

Delinea Secret Server 12.3.1 fixes FIDO2 validation, partial login bypass and unsigned JWT flaws. Upgrade, validate access, and retain evidence.

Read this guide
Security Notices
Red Hat Enterprise Linux 8 Pillow Update Fixes Three CVEsNew!!
10/30/2026

Red Hat's RHEL 8 Pillow update fixes three image-processing CVEs. Inventory consumers, update packages, test applications, and retain evidence.

Read this guide
Security Notices
Red Hat Enterprise Linux 9 BIND Update Fixes Four CVEsNew!!
10/30/2026

Red Hat's RHEL 9 BIND update fixes four CVEs. Inventory DNS roles, install packages, validate resolution and service health, and retain evidence.

Read this guide
Security Notices
JetBrains Updates Address Compromised Certificate TrustNew!!
10/30/2026

JetBrains updates address compromised certificate trust in IDEs, Toolbox, JCEF and jetbrainsd. Patch each layer, validate trust, and retain evidence.

Read this guide