CVE-2025-68121 affecting package msft-golang for versions less than 1.24.12-1

CVE-2025-68121 affecting package msft-golang for versions less than 1.24.12-1. A patched version of the package is available...

CVE-2026-22695 affecting package libpng for versions less than 1.6.54-1

CVE-2026-22695 affecting package libpng for versions less than 1.6.54-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-22801 affecting package libpng for versions less than 1.6.54-1

CVE-2026-22801 affecting package libpng for versions less than 1.6.54-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-21936 affecting package mysql for versions less than 8.0.45-1

CVE-2026-21936 affecting package mysql for versions less than 8.0.45-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-21937 affecting package mysql for versions less than 8.0.45-1

CVE-2026-21937 affecting package mysql for versions less than 8.0.45-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-21964 affecting package mysql for versions less than 8.0.45-1

CVE-2026-21964 affecting package mysql for versions less than 8.0.45-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-68119 affecting package msft-golang for versions less than 1.24.12-1

CVE-2025-68119 affecting package msft-golang for versions less than 1.24.12-1. A patched version of the package is available...

AZL-76811 CVE-2025-58190 affecting package yq 4.45.1-1

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

AZL-78937 CVE-2025-61732 affecting package golang 1.25.7-1

A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary...

AZL-76688 CVE-2025-61732 affecting package golang 1.26.0-1

A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary...

OPENSUSE-SU-2026:10147-1 cockpit-machines-346-2.1 on GA media

These are all security issues fixed in the cockpit-machines-346-2.1 package on the GA media of openSUSE Tumbleweed...

DSA-6122-1 chromium - security update

Bulletin has no description...

openSUSE 15: gdk-pixbuf-loader-libheif / libheif-devel / libheif1 / etc (SUSE-SU-2026:0377-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:0377-1 advisory. - CVE-2025-68431: Fixed heap buffer over-read in HeifPixelImage::overlay via crafted HEIF that exercises the overlay image item bsc1255735 Tenable has...

Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel vulnerabilities (USN-8015-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8015-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

Amazon Linux 2 : nerdctl, --advisory ALAS2-2026-3146 (ALAS-2026-3146)

The version of nerdctl installed on the remote host is prior to 2.2.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3146 advisory. net/http: memory exhaustion in Request.ParseForm CVE-2025-61726 archive/zip: denial of service when parsing arbitrary ZIP...

Debian: Security Advisory (DLA-4466-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2026:0364-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2026:20189-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

dnsmasq-utils 安全漏洞

DNSmasq-utils is a supplementary toolkit developed for the open-source DNSmasq system. Version 2.79-1 of DNSmasq-utils contains a security vulnerability, which stems from a buffer overflow in the dhcprelease tool. This vulnerability could lead to a denial-of-service attack...

Ubuntu 24.04 LTS : GitHub CLI vulnerabilities (USN-8012-1)

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8012-1 advisory. It was discovered that GitHub CLI could behave unexpectedly if users downloaded a malicious GitHub Actions workflow artifact through gh run download. An...