RHEL 8 : Red Hat JBoss Enterprise Application Platform 7.4.24 (RHSA-2026:4916)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:4916 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release o...

OPENSUSE-SU-2026:10386-1 ImageMagick-7.1.2.17-1.1 on GA media

These are all security issues fixed in the ImageMagick-7.1.2.17-1.1 package on the GA media of openSUSE Tumbleweed...

skaffold-2.18.0-1.1 on GA media (moderate)

skaffold-2.18.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10369-1 Rating: moderate Cross-References: CVE-2025-15558 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.5 update

An update is now available for Red Hat JBoss Enterprise Application Platform 8.1. Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime. This release of Red Hat JBoss Enterprise Application Platform 8.1.5 serves as a replaceme...

USN-8098-2 linux-gcp vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...

OPENSUSE-SU-2026:10382-1 cargo1.92-1.92.0-2.1 on GA media

These are all security issues fixed in the cargo1.92-1.92.0-2.1 package on the GA media of openSUSE Tumbleweed...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2026-1610)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 10 : python3.12 (ELSA-2026-4713)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-4713 advisory. 3.12.12-3.0.1.el101.1 - Remove upstream URL reference 3.12.12-3.1 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299...

Fedora 44 : systemd (2026-67f57405ee)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-67f57405ee advisory. More bugfixes. ---- - A bunch of bugfixes - More sanitization for invalid values received from hardware and firmware Tenable has extracted the preceding...

grub2 security update

2.02-170.0.1.el810.1 - Update grub2 dependencies to match new Secure Boot certificate chain of trust Orabug: 37766761 - Fix typo in SBAT metadata Orabug: 37693946 - Allow installation of grub2 only with shim-aa64 that allows booting it Orabug: 37693946 - net/dns: Fix removal of DNS server Orabug:...

OPENSUSE-SU-2026:10378-1 ovmf-202602-5.1 on GA media

These are all security issues fixed in the ovmf-202602-5.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10380-1 python311-uv-0.10.11-1.1 on GA media

These are all security issues fixed in the python311-uv-0.10.11-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10381-1 python311-3.11.15-2.1 on GA media

These are all security issues fixed in the python311-3.11.15-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10384-1 cargo1.94-1.94.0-2.1 on GA media

These are all security issues fixed in the cargo1.94-1.94.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10383-1 cargo1.93-1.93.0-3.1 on GA media

These are all security issues fixed in the cargo1.93-1.93.0-3.1 package on the GA media of openSUSE Tumbleweed...

GHSA-VVP9-7P8X-RFVV lz4_flex's decompression can leak information from uninitialized memory or reused output buffer

Summary Decompressing invalid LZ4 data can leak data from uninitialized memory, or can leak content from previous decompression operations when reusing an output buffer. Details The LZ4 block format defines a "match copy operation" which duplicates previously written data or data from the...

Important: Red Hat Security Advisory: Red Hat Data Grid 8.6.0 security update

An update for Red Hat Data Grid 8 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...

EUVD-2025-208687

Tinycontrol devices such as tcPDU and LAN Controllers LK3.5, LK3.9 and LK4 have two separate authentication mechanisms - one solely for interface management and one for protecting all other server resources. When the latter is turned off which is a default setting, an unauthenticated attacker on...

CVE-2025-11500 Credentials exposure in tinycontrol devices

Tinycontrol devices such as tcPDU and LAN Controllers LK3.5, LK3.9 and LK4 have two separate authentication mechanisms - one solely for interface management and one for protecting all other server resources. When the latter is turned off which is a default setting, an unauthenticated attacker on...

A week in security (March 9 – March 15)

Last week on Malwarebytes Labs: Watch out for fake Malwarebytes renewal notices in your calendar Google patches two Chrome zero-days under active attack. Update now Attackers impersonate Temu in ClickFix $Temu airdrop scam Apple patches Coruna exploit kit flaws for older iOS versions This Android...