RLSA-2026:0596 Moderate: cups security update

The Common UNIX Printing System CUPS provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fixes: CUPS: Local denial-of-service via cupsd.conf update and related issues CVE-2025-61915 cups: Slow client communication leads to a possible DoS attack CVE-2025-584...

BELL-CVE-2025-71125

Bulletin has no description...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002385)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002385 advisory. Double free vulnerability in the sgcommonwrite function in drivers/scsi/sg.c in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial o...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002106)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002106 advisory. Race condition in the smbsendrqst function in fs/cifs/transport.c in the Linux kernel before 3.7.2 allows local users to cause a denial of service NULL pointer...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002459)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002459 advisory. The kvmsetmsrcommon function in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 does not ensure a required timepage alignment during an MSRKVMSYSTEMTIME...

CVE-2025-66292: Improper Limitation of a Pathname to a Restricted Directory

DPanel is an open source server management panel written in Go. Prior to 1.9.2, DPanel has an arbitrary file deletion vulnerability in the /api/common/attach/delete interface. Authenticated users can delete arbitrary files on the server via path traversal. When a user logs into the administrative...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002739)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002739 advisory. The Linux kernel before version 4.11 is vulnerable to a NULL pointer dereference in fs/cifs/cifsencrypt.c:setupntlmv2rsp that allows an attacker controlling a CIFS...

CVE-2026-0959

IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service...

CVE-2026-20820

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

DEBIAN-CVE-2026-22859

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, the URBDRC client does not perform bounds checking on server‑supplied MSUSBINTERFACEDESCRIPTOR values and uses them as indices in libusbudevcompletemsconfigsetup, causing an out‑of‑bounds read. This vulnerability is...

DEBIAN-CVE-2026-22851

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, a race condition between the RDPGFX dynamic virtual channel thread and the SDL render thread leads to a heap use-after-free. Specifically, an escaped pointer to sdl-primary SDLSurface is accessed after it has been...

MAL-2026-258 Malicious code in webmd-page-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ac133760e765dbcb76befb93e31a79e19da15b27c94d4b5da3b8e43c00f2b1 The package webmd-page-common was found to contain malicious code. Source: ghsa-malware...

Malicious code in webmd-page-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ac133760e765dbcb76befb93e31a79e19da15b27c94d4b5da3b8e43c00f2b1 The package webmd-page-common was found to contain malicious code. Source: ghsa-malware...

EUVD-2026-2842

Malicious code in webmd-page-common npm...

DEBIAN-CVE-2025-71108

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Handle incorrect numconnectors capability The UCSI spec states that the numconnectors field is 7 bits, and the 8th bit is reserved and should be set to zero. Some buggy FW has been known to set this bit, and it...

cups security update

An update is available for cups. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Common UNIX Printing System CUPS provides a portable printing layer for Linu...

CVE-2025-14613

creationtimestamp| type| source ---|---|--- 2026-01-14 07:31:35+00:00| seen| https://gist.github.com/Darkcrai86/ad244cc38e39683c77cf9eb62690d6b2 2026-01-14 08:04:03+00:00| seen| https://gist.github.com/Darkcrai86/9134b77f1396f4f1a020347dab3916da...

CVE-2025-68970

creationtimestamp| type| source ---|---|--- 2026-01-14 06:12:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcefybseyi2q...

CVE-2025-38132 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-gcp, linux-vmware, linux-aws, linux-qemu...

MiracleLinux 4 : php-5.3.3-3.AXS4.8 (AXSA:2012-547:03)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2012-547:03 advisory. PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated webpages. PHP also offers built-in...