OPENSUSE-SU-2026:10991-1 afl-5.00c-1.1 on GA media

These are all security issues fixed in the afl-5.00c-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10998-1 ldns-1.9.2-1.1 on GA media

These are all security issues fixed in the ldns-1.9.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11004-1 python311-kafka-python-2.3.2-1.1 on GA media

These are all security issues fixed in the python311-kafka-python-2.3.2-1.1 package on the GA media of openSUSE Tumbleweed...

RHEL 9 : podman (RHSA-2026:25248)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:25248 advisory. The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use...

PT-2026-49088

Name of the Vulnerable Software and Affected Versions GD for Perl versions prior to 2.86 Description The make filehandle function in GD::Image uses Perl's 2-arg open to process filename arguments. This allows OS command injection and file overwrite if a filename begins or ends with a pipe e.g., "...

OPENSUSE-SU-2026:11006-1 tmux-3.6b-2.1 on GA media

These are all security issues fixed in the tmux-3.6b-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10996-1 git-bug-0.10.1-6.1 on GA media

These are all security issues fixed in the git-bug-0.10.1-6.1 package on the GA media of openSUSE Tumbleweed...

.NET 9.0 security update

9.0.118-1.0.1 - Add support for Oracle Linux 9.0.118-1 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181550 9.0.116-2 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163389 9.0.115-2 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152941...

Fedora 44 : httpd (2026-d4136fe979)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d4136fe979 advisory. - new version 2.4.68 - fixes various security issues Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

PT-2026-51165

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.27.1-1.1 Description A heap-buffer-overflow write occurs during the reassembly of TS Gateway RPC RESPONSE messages. This issue is caused by a capacity mismatch in the alloc hint variable. Recommendations Update to...

openSUSE 16 Security Update : postgresql18 (openSUSE-SU-2026:20901-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20901-1 advisory. This update for postgresql18 fixes the following issues Security issues: - CVE-2026-6472: ensure the user has CREATE privilege on the schema...

openSUSE 16 Security Update : syft (openSUSE-SU-2026:20928-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20928-1 advisory. Changes in syft: - Update to version 1.45.0: Added Features - Add support for ZapAddOns as jar files 4654 4932 @douglasclarke - MySQL binary classifier...

SEVRA-BENCH: Social Engineering of Vulnerabilities in Review Agents

Large language model LLM reviewers are increasingly used in pull-request PR workflows, where their approvals help decide which code is merged into a repository. This raises a question that benchmarks for static vulnerability detection or code generation do not address: can an automated reviewer...

OPENSUSE-SU-2026:11001-1 postgresql-jdbc-42.7.11-1.1 on GA media

These are all security issues fixed in the postgresql-jdbc-42.7.11-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10999-1 logback-1.5.34-1.1 on GA media

These are all security issues fixed in the logback-1.5.34-1.1 package on the GA media of openSUSE Tumbleweed...

Stable Channel Update for Desktop

The Stable channel has been updated to 149.0.7827.114/.115 for Windows and Mac and 149.0.7827.114 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details and links may be kept...

flannel-0.28.5-1.1 on GA media (moderate)

flannel-0.28.5-1.1 on GA media Announcement ID: openSUSE-SU-2026:10980-1 Rating: moderate Cross-References: CVE-2026-44283 CVSS scores: CVE-2026-44283 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2026-44283 SUSE : 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N...

CVE-2026-52726

Dulwich is a pure-Python implementation of the Git file formats and protocols. Starting in version 0.23.2 and prior to version 1.2.5, dulwich.porcelain.submoduleupdate, and by extension porcelain.clone..., recursesubmodules=True, materializes attacker-controlled submodule paths from a crafted...

Low: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: syft: syft-1.45.1-0.1.hum1 aarch64, x8664 syft-1.45.1-0.1.hum1.src src...

Important: Red Hat Security Advisory: Submariner v0.21 security fixes and container updates

Submariner v0.21 General Availability release images, which provide enhancements, security fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...