RHSA-2026:46951 Red Hat Security Advisory: kpatch-patch-6_12_0-211_16_1 security update

Bulletin has no description...

SUSE-SU-2026:3336-1 Security update for ImageMagick

This update for ImageMagick fixes the following issue: - Extend CVE-2026-56379 patch by f63c78b bsc1268878...

SUSE-SU-2026:3335-1 Security update for ImageMagick

This update for ImageMagick fixes the following issue - Extend CVE-2026-56379 patch by f63c78b bsc1268878...

ROOT-APP-NPM-CVE-2026-65900 CVE-2026-65900 in @rootio/dompurify - Patched by Root

Root has patched CVE-2026-65900 in the @rootio/dompurify package for Root:npm. Multiple fixed versions available...

SUSE-SU-2026:3350-1 Security update for the Linux Kernel (Live Patch 42 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.172 fixes various security issues: The following security issues were fixed: - CVE-2026-43038: ipv6: icmp: clear skb2-cb in ip6errgenicmpv6unreach bsc1271648. - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to...

Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.6 fixes various security issues: The following security issues were fixed: CVE-2026-23240: tls: Fix race condition in tlsswcancelworktx bsc1262404. CVE-2026-31738: vxlan: validate ND option lengths in vxlannacreate bsc1264060...

Important: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

PT-2026-65574

Tanium addressed a SQL injection vulnerability in Patch...

Oracle Java Critical Patch Update Advisory April 2026

CVE-2026-22007 - Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...

Linux Distros Unpatched Vulnerability : CVE-2026-58662

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Validation of Specified Quantity in Input, Out-of-bounds Read vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before...

CVE-2026-11391: Improper Neutralization of Special Elements used in an SQL Command

Tanium addressed a SQL injection vulnerability in Patch...

SUSE SLES15 Security Update : kernel (Live Patch 25 for SUSE Linux Enterprise 15 SP6) (SUSE-SU-2026:3254-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3254-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.109 fixes various security issues: The following security issues were fixed: -...

SUSE SLES15 Security Update : kernel (Live Patch 28 for SUSE Linux Enterprise 15 SP5) (SUSE-SU-2026:3289-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3289-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.113 fixes various security issues: The following security issues were fixed:...

ALBA-2026:47115 None: coreutils bug fix and enhancement update

The coreutils packages contain the GNU Core Utilities and represent a combination of the previously used GNU fileutils, sh-utils, and textutils packages. Bug Fixes and Enhancements: Fix execution of the downstream tests in coreutils-df-direct.patch and coreutils-i18n.patch almalinux-8.10.z...

Linux Distros Unpatched Vulnerability : CVE-2026-51235

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibRaw 0.21 is vulnerable to Buffer Overflow in the stretch function src/librawcxx.cpp and fujirotate function src/decoders/fuji.cpp. CVE-2026-51235 Note that...

Linux Distros Unpatched Vulnerability : CVE-2026-51297

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sqlite 3.41 has a use-after-free vulnerability in the JSON parsing logic. Remote adversaries can craft malicious JSON payload to trigger memory free followed by...

PT-2026-65486

Pivotick did not validate the URL scheme of node imagePath values derived from graph data before assigning them to SVG image resources. An attacker able to supply crafted graph data could set an image path to a malicious URI. When a victim rendered the affected graph, the browser could resolve th...

PT-2026-65458

A flaw has been found in nextlevelbuilder GoClaw up to 3.13.2. Affected by this vulnerability is the function ExecTool.Execute of the file goclaw/internal/http/tools invoke.go of the component jq Handler. Executing a manipulation can lead to information disclosure. The attack can be launched...

The CTDB protocol has bounds checking issues

== Summary: CTDB fails to do integrity checking of received packets. This includes failure to check field lengths against packet lengths when unmarshalling packets. Description CTDB fails to do a number of integrity checks on received packets. This includes: checking of field lengths against pack...

DNS signing DoS via TKEY name cache exhaustion

== Summary: An unauthenticated user can repeatedly register names TKEY names, which floods a cache causing legitimate TKEYs to be expunged. This can practically block the use DNS TSIG signing. Description Only authenticated users are supposed to be able to use TKEY DNS records to register shared...