RockyLinux 10 : skopeo (RLSA-2026:64818)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:64818 advisory. net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 encoding/asn1: golang: Go encoding/asn1: Denial of...

Oracle Linux 10 : ELSA-2026-65159-0: / thunderbird (ELSA-2026-651590)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-651590 advisory. 140.14.0-1.0.1 - Add Oracle prefs 140.14.0-1 - Update to 140.14.0 ESR Tenable has extracted the preceding description block directly from the Oracle...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: expat: expat-2.8.4-0.1.hum1 aarch64, x8664 expat-devel-2.8.4-0.1.hum1 aarch64, x8664 expat-static-2.8.4-0.1.hum1 aarch64, x8664 expat-2.8.4-0.1.hum1.src src Security Fixes: expat: CVE-2026-66046...

CLSA-2026-1788849250 TuxCare security update for jinja2 (2 CVEs)

TuxCare rebuilt jinja2 to address 2 CVEs. Fixed in 3.0.3.post2+tuxcare...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.11: python3.11-3.11.16-1.2.hum1 aarch64, x8664 python3.11-debug-3.11.16-1.2.hum1 aarch64, x8664 python3.11-devel-3.11.16-1.2.hum1 aarch64, x8664 python3.11-idle-3.11.16-1.2.hum1 aarch64,...

CLSA-2026-1788876191 TuxCare security update for org.springframework (8 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 8 CVEs. Fixed in 5.3.24-tuxcare.8...

SUSE-SU-2026:23534-1 Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46037: ipv4: icmp: validate reply type before using icmppointers bsc1267362. - CVE-2026-46242: eventpoll: fix epremove struct eventpoll / struct file UAF...

SUSE-SU-2026:23533-1 Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues: The following security issues were fixed: - CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock bsc1269282. - CVE-2026-46037: ipv4: icmp: validate reply type before using icmppointers...

Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-44.1 fixes various security issues: The following security issues were fixed: CVE-2026-23240: tls: Fix race condition in tlsswcancelworktx bsc1262404. CVE-2026-23449: net/sched: teql: Fix double-free in teqlmasterxmit bsc1262213...

SUSE-SU-2026:23541-1 Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues: The following security issues were fixed: - CVE-2025-40204: sctp: Fix MAC comparison to be constant-time bsc1253437. - CVE-2026-23240: tls: Fix race condition in tlsswcancelworktx bsc1262404. -...

CLSA-2026-1788873744 TuxCare security update for 32 packages (11 CVEs)

TuxCare rebuilt 32 packages to address 11 CVEs. Fixed in 7.0.70-tuxcare.3...

CLSA-2026-1788870312 TuxCare security update for org.springframework.graphql:spring-graphql (5 CVEs)

TuxCare rebuilt org.springframework.graphql:spring-graphql to address 5 CVEs. Fixed in 1.3.5-tuxcare.3...

CLSA-2026-1788866911 TuxCare security update for aiohttp (6 CVEs)

TuxCare rebuilt aiohttp to address 6 CVEs. Fixed in 3.8.5.post12+tuxcare...

CLSA-2026-1788865685 TuxCare security update for org.springframework (9 CVEs)

TuxCare rebuilt 21 org.springframework packages to address 9 CVEs. Fixed in 4.3.25.RELEASE-tuxcare.5...

CLSA-2026-1788853251 TuxCare security update for com.jayway.jsonpath (1 CVE)

TuxCare rebuilt 2 com.jayway.jsonpath packages to address 1 CVE. Fixed in 2.5.0-tuxcare.1...

PT-2026-88522

The following issues are included in Project Mainline components. Subcomponent CVE ART CVE-2026-28664 Media Framework components CVE-2026-28609, CVE-2026-45527 Documents UI CVE-2026-28636 Media Codecs CVE-2026-28618, CVE-2026-55294 Media Provider CVE-2026-28622, CVE-2026-28638, CVE-2026-28671,...

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: can: bcm: add locking for bcmop runtime updates CVE-2025-38004 kernel: iouring/poll: fix signed comparison in iopollgetownership CVE-2026-52933 kernel: netfilter: nat: use kfreercu to...

AlmaLinux 8 : kernel-rt (ALSA-2026:64770)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:64770 advisory. kernel: crypto: pcrypt - Fix handling of MAYBACKLOG requests CVE-2026-43493 kernel: netfilter: conntrack: remove sprintf usage CVE-2026-53002 kernel:...

Security update for hauler (moderate)

openSUSE security update: security update for hauler ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21793-1 Rating: moderate References: bsc1265425 bsc1276124 bsc1276651 bsc1277965 Cross-References: CVE-2026-37236 CVE-2026-41178 CVE-2026-41888...

RHEL 9 : opentelemetry-collector (RHSA-2026:65117)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:65117 advisory. Collector with the supported components for a Red Hat build of OpenTelemetry Security Fixes: net/mail: golang: net/mail: Denial of Service...