OPENSUSE-SU-2026:11463-1 libXfont2-2-2.0.7-3.1 on GA media

These are all security issues fixed in the libXfont2-2-2.0.7-3.1 package on the GA media of openSUSE Tumbleweed...

kernel security, bug fix, and enhancement update

4.18.0-553.153.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

RockyLinux 10 : kernel (RLSA-2026:49871)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:49871 advisory. kernel: Linux kernel: Denial of Service due to NULL function pointer race in timer shutdown CVE-2025-68214 kernel: procfs: avoid fetching build ID whil...

Fedora 44 : chromium (2026-976bbbc661)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-976bbbc661 advisory. security release chromium-151.0.7922.71 includes 370 security fixes: CVE-2026-17650 - CVE-2026-18019 Tenable has extracted the preceding description...

Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: xen: AMD Zen 2 Processors: Privilege escalation via improper CPU cache isolation CVE-2025-54518 Bug Fixes and Enhancements: Kernel...

OPENSUSE-SU-2026:11470-1 python313-pyOpenSSL-26.4.0-1.1 on GA media

These are all security issues fixed in the python313-pyOpenSSL-26.4.0-1.1 package on the GA media of openSUSE Tumbleweed...

Unbreakable Enterprise kernel security update

5.15.0-322.203.3.4.5 - KVM: x86/mmu: Stop needlessly making MMU pages available for TDP MMU faults David Matlack Orabug: 39832946 - KVM: x86: Check for invalid/obsolete root after making MMU pages available Sean Christopherson Orabug: 39832946 CVE-2026-64561 - KVM: x86/mmu: Rename directmap to...

RHEL 9 : Backport fixes for CVE-2026-64835 and CVE-2026-58049 (Important) (RHSA-2026:51180)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:51180 advisory. CVE-2026-64835 FFmpeg: Arbitrary code execution, information disclosure, or denial of service via crafted ADX/AAX audio files CVE-2026-5804...

OPENSUSE-SU-2026:11467-1 python313-aiohttp-3.14.3-1.1 on GA media

These are all security issues fixed in the python313-aiohttp-3.14.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11465-1 python313-Django4-4.2.30-5.1 on GA media

These are all security issues fixed in the python313-Django4-4.2.30-5.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11464-1 python313-Django-6.0.8-1.1 on GA media

These are all security issues fixed in the python313-Django-6.0.8-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11462-1 gleam-1.18.1-1.1 on GA media

These are all security issues fixed in the gleam-1.18.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11468-1 python313-cryptography-50.0.0-1.1 on GA media

These are all security issues fixed in the python313-cryptography-50.0.0-1.1 package on the GA media of openSUSE Tumbleweed...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2026-500136)

The remote Oracle Linux 7 / 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-500136 advisory. - x86/bugs: Make Safe-RET robust against interrupt injection Borislav Petkov AMD Orabug: 39832992 CVE-2026-68480 - xfs: resample the data fork...

Stable Channel Update for Desktop

The Stable channel has been updated to 151.0.7922.108/.109 for Windows and Mac and 151.0.7922.108 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details and links may be kept...

Important: Red Hat Security Advisory: Red Hat Quay 3.9.25

Red Hat Quay 3.9.25 is now available with bug fixes. Quay 3.9.25...

CVE-2026-71314 Nuxt: Unauthenticated out-of-memory crash via unbounded v-for expansion in island rendering

Nuxt is an open-source web development framework for Vue.js. From 3.1.0 until 3.21.10 and 4.5.1, an unauthenticated attacker can use a server island v-for prop, including vforToArray and , to trigger unbounded SSR memory allocation until MAXVFORLENGTH = 100000 and crash the Nuxt process. This iss...

CLSA-2026-1785958008 TuxCare security update for org.springframework (11 CVEs)

TuxCare rebuilt 25 org.springframework packages to address 11 CVEs. Fixed in 6.1.15-tuxcare.1...

CVE-2026-70609

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.7, 40.9.0, 41.2.0, and 42.0.0-beta.1, the mode option of webContents.openDevTools was not sanitized before use by the DevTools frontend. If an attacker can influence this value,...

EUVD-2026-53472

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...