Oracle Linux 8 : virt:kvm_utils3 (ELSA-2026-50239)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50239 advisory. - Limit recursion in ri-records CVE-2021-3622 resolves: rhbz1976194 - Bounds check for block exceeding page length CVE-2021-3504 resolves: rhbz1950501...

python3.12 security update

3.12.13-2 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168130, RHEL-167892 3.12.13-1 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related:...

OPENSUSE-SU-2026:10628-1 pocketbase-0.37.3-1.1 on GA media

These are all security issues fixed in the pocketbase-0.37.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10622-1 python313-mitmproxy-12.2.2-1.1 on GA media

These are all security issues fixed in the python313-mitmproxy-12.2.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10621-1 libngtcp2-16-1.22.1-1.1 on GA media

These are all security issues fixed in the libngtcp2-16-1.22.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10620-1 libmozjs-115-0-115.15.0-8.1 on GA media

These are all security issues fixed in the libmozjs-115-0-115.15.0-8.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10624-1 libsystemd0-259.5-1.3 on GA media

These are all security issues fixed in the libsystemd0-259.5-1.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10619-1 emacs-30.2-8.1 on GA media

These are all security issues fixed in the emacs-30.2-8.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10625-1 xdg-dbus-proxy-0.1.7-1.1 on GA media

These are all security issues fixed in the xdg-dbus-proxy-0.1.7-1.1 package on the GA media of openSUSE Tumbleweed...

CLSA-2026-1776878817 squid: Fix of 13 CVEs

CVE-2018-1000027: fix NULL pointer dereference in clientFollowXForwardedForCheck for transactions without a client connection - CVE-2018-19131: fix XSS via X.509 certificate fields rendered unescaped in SSL error pages - CVE-2019-12520: prevent cache poisoning by suppressing URL userinfo from...

php: Fix of 5 CVEs

CVE-2019-9023: mbstring oniguruma: fix heap overflow in utf32bembctocode and related mbctocode encoders bug 77418; completes CVE-2019-9023 coverage alongside existing php-5.3.29-bug773707737177381773827738577394.patch - CVE-2019-11034: exif: fix heap-buffer-overflow in phpifdget32s bug 77753 -...

OPENSUSE-SU-2026:10611-1 freerdp2-2.11.7-8.1 on GA media

These are all security issues fixed in the freerdp2-2.11.7-8.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10615-1 ovmf-202602-9.1 on GA media

These are all security issues fixed in the ovmf-202602-9.1 package on the GA media of openSUSE Tumbleweed...

SUSE SLES15 Security Update : tomcat10 (SUSE-SU-2026:1603-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1603-1 advisory. Security fixes: - CVE-2026-24880: Request smuggling via invalid chunk extension bsc1261850. - CVE-2026-25854: Occasionally open...

OPENSUSE-SU-2026:10612-1 golang-github-prometheus-alertmanager-0.31.1-3.1 on GA media

These are all security issues fixed in the golang-github-prometheus-alertmanager-0.31.1-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10614-1 libntfs-3g-devel-2022.10.3-6.1 on GA media

These are all security issues fixed in the libntfs-3g-devel-2022.10.3-6.1 package on the GA media of openSUSE Tumbleweed...

SUSE SLES15 Security Update : tomcat (SUSE-SU-2026:1604-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1604-1 advisory. Security fixes: - CVE-2026-24880: Request smuggling via invalid chunk extension bsc1261850. - CVE-2026-25854: Occasionally open...

OPENSUSE-SU-2026:10616-1 python311-Mako-1.3.11-1.1 on GA media

These are all security issues fixed in the python311-Mako-1.3.11-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10613-1 kyverno-1.17.2-1.1 on GA media

These are all security issues fixed in the kyverno-1.17.2-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-41478

Saltcorn is an extensible, open source, no-code database application builder. Prior to 1.4.6, 1.5.6, and 1.6.0-beta.5, a SQL injection vulnerability in Saltcorn’s mobile-sync routes allows any authenticated low-privilege user with read access to at least one table to inject arbitrary SQL through...