27723 matches found
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...
Debian dla-4663 : libjs-lodash - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4663 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-4663-1 [email protected]...
ALSA-2026:34355 Moderate: mod_http2 security, bug fix, and enhancement update
The modh2 Apache httpd module implements the HTTP2 protocol h2+h2c on top of libnghttp2 for httpd 2.4 servers. Security Fixes: httpd: modhttp2: Apache HTTP Server modhttp2: Use After Free vulnerability allows arbitrary code execution or denial of service. CVE-2026-48913 httpd: Apache HTTP Server:...
freerdp security update
2.1.1-5.0.9 - Fixed CVE-2026-25952 CVE-2026-26986 CVE-2026-27951 CVE-2026-29775 CVE-2026-31883 CVE-2026-31884 CVE-2026-31885 CVE-2026-33985 Orabug: 39440279 2.1.1-5.0.7 - Fixed CVE-2026-22852 CVE-2026-22854 CVE-2026-22856 CVE-2026-23732 CVE-2026-23948 CVE-2026-24491 CVE-2026-24675 CVE-2026-24676...
OPENSUSE-SU-2026:11166-1 c3p0-0.14.1-1.1 on GA media
These are all security issues fixed in the c3p0-0.14.1-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-55485
Name of the Vulnerable Software and Affected Versions CloudNativePG versions prior to 1.28.4 CloudNativePG versions prior to 1.29.2 Description CloudNativePG embeds cleartext role passwords in ALTER ROLE and CREATE ROLE statements generated by the SetUserPassword and appendPasswordOption function...
PT-2026-55484
Name of the Vulnerable Software and Affected Versions OnionShare versions prior to 2.6.4-1.1 Description In Receive mode, the software writes uploaded files to the system even when file uploads have been explicitly disabled. Recommendations Update to version 2.6.4-1.1...
AlmaLinux 8 : kernel (ALSA-2026:33743)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:33743 advisory. kernel: scsi: target: iscsi: Fix use-after-free in iscsitdecconnusagecount CVE-2026-23216 kernel: gfs2: Fix use-after-free in iomap inline data write pat...
openSUSE 16 Security Update : loupe (openSUSE-SU-2026:21074-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21074-1 advisory. This update for loupe fixes the following issue - CVE-2025-58160: tracing-subscriber: untrusted input containing ANSI escape sequences can lead to...
Oracle Linux 9 : kernel (ELSA-2026-21556)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-21556 advisory. - net/sched: fix pedit partial COW leading to page cache corruption Ivan Vecera RHEL-177392 CVE-2026-46331 - scsi: qla2xxx: Completely fix fcport doub...
PT-2026-55483
Name of the Vulnerable Software and Affected Versions OnionShare versions prior to 2.6.4-1.1 Description OnionShare follows symbolic links symlinks within shared directories, which can lead to the unintended disclosure of local files from the host system. Recommendations Update to version 2.6.4-1...
ALSA-2026:34109 Important: httpd security, bug fix, and enhancement update
The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: incomplete fix for CVE-2023-38709 CVE-2024-42516 httpd: NULL pointer dereference via specially crafted request CVE-2026-29169 httpd: Apache HTTP Server: Heap-based Buffer...
OPENSUSE-SU-2026:11167-1 kubectl-cnpg-1.29.2-1.1 on GA media
These are all security issues fixed in the kubectl-cnpg-1.29.2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11165-1 alloy-1.17.1-1.1 on GA media
These are all security issues fixed in the alloy-1.17.1-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-55486
Name of the Vulnerable Software and Affected Versions CloudNativePG versions prior to 1.28.4 CloudNativePG versions prior to 1.29.2 Description CloudNativePG fails to pin the search path in the fillDefaultParameters function within pkg/management/postgres/pool/profiles.go when opening superuser...
PT-2026-55433
These are all security issues fixed in the python311-python-engineio-4.13.3-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-55428
These are all security issues fixed in the alloy-1.17.1-1.1 package on the GA media of openSUSE Tumbleweed...
openSUSE 16: MozillaThunderbird / MozillaThunderbird-openpgp-librnp / etc (openSUSE-SU-2026:21168-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21168-1 advisory. Changes in MozillaThunderbird: - Mozilla Thunderbird 140.12.0 ESR MFSA 2026-61 bsc1268071 CVE-2026-12289 bmo2023443 Privilege escalation in the...