CVE-2026-56651: Improper Link Resolution Before File Access

Dool in versions up to 1.3.8 is vulnerable to symlink following when the "--devel" flag is used, as the application opens a log file without the "ONOFOLLOW" flag. A local attacker can exploit this by creating a symlink at the expected log file path pointing to a sensitive file, causing dool to...

OPENSUSE-SU-2026:11601-1 LibVNCServer-devel-0.9.15-4.1 on GA media

These are all security issues fixed in the LibVNCServer-devel-0.9.15-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11593-1 c-ares-devel-1.34.8-1.1 on GA media

These are all security issues fixed in the c-ares-devel-1.34.8-1.1 package on the GA media of openSUSE Tumbleweed...

libjxl-devel-0.12.0-1.1 on GA media (moderate)

libjxl-devel-0.12.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11537-1 Rating: moderate Cross-References: CVE-2026-52584 CVSS scores: CVE-2026-52584 SUSE : 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L CVE-2026-52584 SUSE : 6.9...

OPENSUSE-SU-2026:11537-1 libjxl-devel-0.12.0-1.1 on GA media

These are all security issues fixed in the libjxl-devel-0.12.0-1.1 package on the GA media of openSUSE Tumbleweed...

ffmpeg-9-libavcodec-devel-9.0.1-1.1 on GA media (moderate)

ffmpeg-9-libavcodec-devel-9.0.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11515-1 Rating: moderate Cross-References: CVE-2025-10256 CVE-2025-1594 CVE-2025-9951 CVE-2026-12706 CVE-2026-30997 CVE-2026-8461 CVSS scores: CVE-2025-10256 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H...

kernel-devel-7.1.8-1.1 on GA media (moderate)

kernel-devel-7.1.8-1.1 on GA media Announcement ID: openSUSE-SU-2026:11506-1 Rating: moderate Cross-References: CVE-2026-68081 CVE-2026-68082 CVSS scores: CVE-2026-68081 SUSE : 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2026-68081 SUSE : 7.1...

OPENSUSE-SU-2026:11506-1 kernel-devel-7.1.8-1.1 on GA media

These are all security issues fixed in the kernel-devel-7.1.8-1.1 package on the GA media of openSUSE Tumbleweed...

libpcp-devel-6.3.8-3.1 on GA media (moderate)

libpcp-devel-6.3.8-3.1 on GA media Announcement ID: openSUSE-SU-2026:11490-1 Rating: moderate Cross-References: CVE-2026-16524 CVE-2026-16526 CVE-2026-16527 CVE-2026-16529 CVE-2026-16530 CVE-2026-16531 CVSS scores: CVE-2026-16524 SUSE : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H...

OPENSUSE-SU-2026:11490-1 libpcp-devel-6.3.8-3.1 on GA media

These are all security issues fixed in the libpcp-devel-6.3.8-3.1 package on the GA media of openSUSE Tumbleweed...

kernel-devel-7.1.7-1.1 on GA media (moderate)

kernel-devel-7.1.7-1.1 on GA media Announcement ID: openSUSE-SU-2026:11476-1 Rating: moderate Cross-References: CVE-2026-52972 CVE-2026-64187 CVE-2026-64189 CVE-2026-64192 CVE-2026-64205 CVE-2026-64206 CVE-2026-64207 CVE-2026-64244 CVE-2026-64245 CVE-2026-64246 CVE-2026-64247 CVE-2026-64248...

[SECURITY] Fedora 43 Update: perl-Devel-Cover-1.51-4.fc43

This module provides code coverage metrics for Perl. Code coverage metrics describe how thoroughly tests exercise code. By using Devel::Cover you can discover areas of code not exercised by your tests and determine which tests to create to increase coverage. Code coverage can be considered as an...

Fedora 43 : perl / perl-Devel-Cover / perl-PAR-Packer / polymake (2026-b2e2c26935)

The remote Fedora 43 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-b2e2c26935 advisory. Update Perl to 5.42.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

openSUSE 16: rsyslog / rsyslog-devel / rsyslog-diag-tools / etc (openSUSE-SU-2026:21535-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21535-1 advisory. - CVE-2026-61548: crafted RFC 5424 messages to mmpstrucdata can lead to a stack overwrite bsc1272414. - input sequence during oversize-frame recovery in...

OPENSUSE-SU-2026:21535-1 Security update for rsyslog

This update for rsyslog fixes the following issues: - CVE-2026-61548: crafted RFC 5424 messages to mmpstrucdata can lead to a stack overwrite bsc1272414. - input sequence during oversize-frame recovery in imptcp can cause denial of service bsc1271910. Changes for rsyslog: - added a devel...

[SECURITY] Fedora 44 Update: perl-Devel-Cover-1.52-4.fc44

This module provides code coverage metrics for Perl. Code coverage metrics describe how thoroughly tests exercise code. By using Devel::Cover you can discover areas of code not exercised by your tests and determine which tests to create to increase coverage. Code coverage can be considered as an...

Fedora 44 : perl / perl-Devel-Cover / perl-PAR-Packer / polymake (2026-475559cbb9)

The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-475559cbb9 advisory. Update Perl to 5.42.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

openSUSE 16: ctdb / ctdb-pcp-pmda / ldb-tools / libldb-devel / libldb2 / etc (openSUSE-SU-2026:21475-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21475-1 advisory. - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server bsc1271672. - CVE-2026-15779: pamwinbind module with...

Oracle Linux 8 : libtiff (ELSA-2026-47184)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-47184 advisory. 4.0.9-38 - fix CVE-2026-12912: heap-buffer-overflow in PixarLog 8BITABGR decode with stride 3 RHEL-189371 Tenable has extracted the preceding description block...

SUSE SLES15: ctdb / libsamba-policy-devel / libsamba-policy-python3-devel / etc (SUSE-SU-2026:3365-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3365-1 advisory. This update for samba fixes the following issues - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS...