python-idna security update

3.7-6 - Fix CVE-2026-45409: quadratic time complexity in IDNA validation 3.7-5 - rpminspect: Disable the unicode inspection...

PT-2026-71475

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 17.11 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description A stack buffer overflow occurs during argument name...

ALSA-2026:54654 Important: bind security update

The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...

The vulnerability of the `pci/endpoint/pci-ep-cfs.c` component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the pci/endpoint/pci-ep-cfs.c component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the scsi/qla2xxx/qla_gs.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the scsi/qla2xxx/qlags.c component of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel component tpm allows a hacker to trigger a service failure.

The vulnerability of the tpm component in the Linux operating system’s kernel is related to incorrect checking of the specified index, position, or offset in the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel Bluetooth module, allowing a hacker to trigger a service failure

The vulnerability of the Linux operating system’s kernel Bluetooth module is related to premature resource release. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the scsi/qla2xxx/qla_gs.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the scsi/qla2xxx/qlags.c component of the Linux operating system is related to the failure to release resources after the expiration of their useful lifespan. Exploiting this vulnerability can allow an attacker to cause service failures...

RockyLinux 8 : kernel (RLSA-2026:54246)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:54246 advisory. kernel: udf: fix partition descriptor append bookkeeping CVE-2026-45991 kernel: ice: fix double-free of txbuf skb CVE-2026-53009 Tenable has extracted t...

The vulnerability in the btrfs/transaction.c component of the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the btrfs/transaction.c component in the Linux operating system’s kernel is related to improper synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

UBUNTU-CVE-2026-73150

GHSA-4f8x-49pf-3x5v: Buffer overflow in APRS message construction...

The vulnerability of the hwmon/w83791d.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the hwmon/w83791d.c component in the Linux operating system is related to insufficient checking of the status of the shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-71894

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Stack exhaustion can occur during the parsing of deeply-nested, recursive structures due to the lack of a recursion limit in the Unmarshal function...

PT-2026-71897

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The DecodeElement function resets the depth counter, preventing it from triggering. This behavior can lead to stack exhaustion, a condition where the program...

Linux Distros Unpatched Vulnerability : CVE-2026-68451

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/zcrypt: Validate length for CCA ECC private key requests ccaecc2protkey derives the copy length for the CPRB parameter block directly from the length field...

The vulnerability of the dma/at_hdmac.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the dma/athdmac.c component in the Linux operating system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-68454

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: s390: pci: Fix handling of AIF enable without AISB When a guest seeks to register IRQs without a summary bit specified, ensure that the associated GAITE th...

SUSE SLES12: libpython3_4m1_0 / libpython3_4m1_0-32bit / python3 / python3-base / etc (SUSE-SU-2026:3601-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3601-1 advisory. - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the configparser module is used...

ROS-20260813-73-0004

The vulnerability in Gitea is related to the use of a name with an incorrect link. Exploiting this vulnerability can allow an attacker to cause service failures...

SUSE SLES15 Security Update : erlang26 (SUSE-SU-2026:3579-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3579-1 advisory. - CVE-2026-28810: predictable DNS transaction IDs can cause DNS cache poisoning bsc1261726. - CVE-2026-42789: publickey application...