ALSA-2026:63022 Important: grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 net/mail: golang: Go net/mail: Denial of Service via crafted email inpu...

Oracle Linux 10 : ELSA-2026-61377-0: / nodejs24 (ELSA-2026-613770)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-613770 advisory. 1:24.19.0-1.0.1 - Add c-ares as dependency orabug 39781256 - Update upstream references 1:24.19.0-1 - Update to version 24.19.0 Tenable has extracte...

openSUSE 16: gegl / gegl-0_4 / gegl-0_4-lang / gegl-devel / libgegl-0_4-0 / etc (openSUSE-SU-2026:21731-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21731-1 advisory. Changes in gegl: - CVE-2026-18300: libs/rgbe: fix 200kb report from ZDI bsc1276229 Tenable has extracted the preceding description block directly from t...

Fedora 43 : gvfs (2026-571b7e1505)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-571b7e1505 advisory. Fix CVE-2026-84267, CVE-2026-84268, CVE-2026-84269, and CVE-2026-84270 Tenable has extracted the preceding description block directly from the Fedor...

Important: grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fixes: mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME head...

Debian dsa-6482 : chromium - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6482 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6482-1 [email protected] https://www.debian.org/securit...

Oracle Linux 8 : ELSA-2026-62407-0: / grafana (ELSA-2026-624070)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-624070 advisory. - Fixes CVE-2024-1442 Add email verification when updating user email Orabug: 38550520 - Resolves RHEL-219393: CVE-2026-42127 Tenable has extracted t...

Oracle Linux 10 / 8 / 9 : microcode_ctl (ELSA-2026-500239)

The remote Oracle Linux 10 / 8 / 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-500239 advisory. - Security advisories: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01379.html CVE-2025-31936...

glibc-2.44-1.1 on GA media (moderate)

glibc-2.44-1.1 on GA media Announcement ID: openSUSE-SU-2026:11660-1 Rating: moderate Cross-References: CVE-2026-6368 CVE-2026-6791 CVSS scores: CVE-2026-6368 SUSE : 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H CVE-2026-6791 SUSE : 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H Affected...

perl-GD security update

2.49-3.0.1 - Security update for CVE-2026-11526 Orabug: 39825996...

nodejs:24 security update

nodejs 1:24.18.0-3 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 5.9.0 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223388 RHEL-223907 RHEL-223792 1:24.18.0-3 - Backport patch update sqlite to 3.53.4 Fixes: CVE-2026-11824, CVE-2026-11822...

CVE-2026-63387 affecting package libevent for versions less than 2.1.13-1

CVE-2026-63387 affecting package libevent for versions less than 2.1.13-1. An upgraded version of the package is available that resolves this issue...

CLSA-2026-1788377477 TuxCare security update for org.springframework (7 CVEs)

TuxCare rebuilt 22 org.springframework packages to address 7 CVEs. Fixed in 5.1.9.RELEASE-tuxcare.5...

CLSA-2026-1788375461 TuxCare security update for postcss (2 CVEs)

TuxCare rebuilt postcss to address 2 CVEs. Fixed in 8.4.41-tuxcare.4...

CLSA-2026-1788373419 TuxCare security update for postcss (2 CVEs)

TuxCare rebuilt postcss to address 2 CVEs. Fixed in 8.4.14-tuxcare.4...

CLSA-2026-1788373352 TuxCare security update for postcss (2 CVEs)

TuxCare rebuilt postcss to address 2 CVEs. Fixed in 8.4.5-tuxcare.3...

CLSA-2026-1788373105 TuxCare security update for org.springframework (2 CVEs)

TuxCare rebuilt 25 org.springframework packages to address 2 CVEs. Fixed in 6.0.13-tuxcare.2...

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

CLSA-2026-1788372470 TuxCare security update for org.springframework (21 CVEs)

TuxCare rebuilt 23 org.springframework packages to address 21 CVEs. Fixed in 5.2.0.RELEASE-tuxcare.4...

Important: Red Hat Security Advisory: osbuild-composer security update

An update for osbuild-composer is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...