frr security, bug fix, and enhancement update

8.5.3-15.1 - Resolves: RHEL-193234 - input validation fixes for EVPN NLRI and ENCAP/VNC packet parsing 8.5.3-15 - Resolves: RHEL-176258 - AVC when reading user's site-packages 8.5.3-14 - Resolves: RHEL-152300 - ignored route in the kernel after flapping interface...

perl-Archive-Tar security update

2.30-3 - Fix CVE-2026-9538: cap per-entry declared size during tar read to defend against attacker-controlled size-field memory DoS - Resolves: RHEL-191913...

ALSA-2026:49612 Important: perl-DBI security update

DBI is a database access Application Programming Interface API for the Perl Language. The DBI API Specification defines a set of functions, variables and conventions that provide a consistent database interface independent of the actual database being used. Security Fixes: DBI: DBI: Arbitrary cod...

ALSA-2026:49621 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Site isolation issue in the DOM: Navigation component CVE-2026-15719 firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component CVE-2026-15718 firefox: thunderbird: Mitigation...

thunderbird security update

140.13.0-1.0.1 - Add Oracle prefs 140.13.0-1 - Update to 140.13.0 ESR...

ImageMagick-7.1.2.28-2.1 on GA media (moderate)

ImageMagick-7.1.2.28-2.1 on GA media Announcement ID: openSUSE-SU-2026:11433-1 Rating: moderate Cross-References: CVE-2026-64685 CVSS scores: CVE-2026-64685 SUSE : 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now...

python313-sentry-sdk-2.66.1-1.1 on GA media (moderate)

python313-sentry-sdk-2.66.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11425-1 Rating: moderate Cross-References: CVE-2024-40647 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

MiracleLinux 9 : coreutils-8.32-41.el9_8 (AXSA:2026-1423:04)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1423:04 advisory. coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification CVE-2025-5278 Tenable has extracted the preceding description block directly fr...

openSUSE 16 Security Update : chromium (openSUSE-SU-2026:21514-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21514-1 advisory. Changes in chromium: - Chromium 151.0.7922.71 boo1272936: CVE-2026-17650: Use after free in Compositing CVE-2026-17651: Insufficient validation ...

ALSA-2026:49523 Important: perl-Archive-Tar security update

Archive::Tar provides an object oriented mechanism for handling tar files. It provides class methods for quick and easy files handling while also allowing for the creation of tar file objects for custom manipulation. If you have the IO::Zlib module installed, Archive::Tar will also support...

ALSA-2026:49508 Important: gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fixes: gstreamer: GStreamer: Arbitrary code execution via...

Critical Photon OS Security Update - PHSA-2026-5.0-92-0938

Updates of 'linux', 'linux-esx' packages of Photon OS have been released...

Important: perl-Archive-Tar security update

Archive::Tar provides an object oriented mechanism for handling tar files. It provides class methods for quick and easy files handling while also allowing for the creation of tar file objects for custom manipulation. If you have the IO::Zlib module installed, Archive::Tar will also support...

Important: perl-Archive-Tar security update

Archive::Tar provides an object oriented mechanism for handling tar files. It provides class methods for quick and easy files handling while also allowing for the creation of tar file objects for custom manipulation. If you have the IO::Zlib module installed, Archive::Tar will also support...

RHEL 10 : osbuild-composer (RHSA-2026:49526)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:49526 advisory. A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building...

[SECURITY] [DSA 6410-1] libssh security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6410-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 02, 2026 https://www.debian.org/security/faq -...

Debian dla-4712 : node-tar - security update

The remote Debian 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4712 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4712-1 [email protected]...

Security update for webkit2gtk3 (important)

openSUSE security update: security update for webkit2gtk3 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21508-1 Rating: important References: bsc1271638 Cross-References: CVE-2024-4367 CVE-2026-39872 CVE-2026-43663 CVE-2026-43676 CVE-2026-43699...

python313-huggingface-hub-1.26.0-1.1 on GA media (moderate)

python313-huggingface-hub-1.26.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11422-1 Rating: moderate Cross-References: CVE-2026-15717 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

libntpc1-1.2.5-1.1 on GA media (moderate)

libntpc1-1.2.5-1.1 on GA media Announcement ID: openSUSE-SU-2026:11417-1 Rating: moderate Cross-References: CVE-2026-18321 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the libntpc1-1.2.5-1....