openSUSE 16 Security Update : chromium (openSUSE-SU-2026:20332-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20332-1 advisory. Changes in chromium: - Chromium 145.0.7632.159 boo1259213 CVE-2026-3536: Integer overflow in ANGLE CVE-2026-3537: Object lifecycle issue in...

openSUSE 16 : Recommended update for shim (SUSE-SU-openSUSE-RU-2026:20325-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU- openSUSE-RU-2026:20325-1 advisory. This update for shim fixes the following issues: shim is updated to version 16.1: - shimstartimage: fix guid/handle pairing when uninstalling...

RHSA-2026:3958 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update

Bulletin has no description...

Fedora 44 : coturn (2026-379e214a37)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-379e214a37 advisory. Coturn 4.9.0 - Multiple security fixes - Fix to Web Admin password check - Cleanup of deprecated OpenSSL APIs - Fix for CVE-2026-27624: Bypass...

OPENSUSE-SU-2026:10299-1 go1.26-1.26.1-1.1 on GA media

These are all security issues fixed in the go1.26-1.26.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10303-1 libIex-3_4-33-3.4.6-1.1 on GA media

These are all security issues fixed in the libIex-34-33-3.4.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10300-1 jetty-annotations-9.4.58-3.1 on GA media

These are all security issues fixed in the jetty-annotations-9.4.58-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10305-1 tomcat-9.0.115-1.1 on GA media

These are all security issues fixed in the tomcat-9.0.115-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10306-1 tomcat10-10.1.52-1.1 on GA media

These are all security issues fixed in the tomcat10-10.1.52-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10302-1 kubeshark-cli-53.1.0-1.1 on GA media

These are all security issues fixed in the kubeshark-cli-53.1.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10309-1 weblate-5.16.1-1.1 on GA media

These are all security issues fixed in the weblate-5.16.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10307-1 tomcat11-11.0.18-1.1 on GA media

These are all security issues fixed in the tomcat11-11.0.18-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10301-1 kernel-devel-longterm-6.18.16-1.1 on GA media

These are all security issues fixed in the kernel-devel-longterm-6.18.16-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE SLES16 Security Update : podman (SUSE-SU-2026:20626-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:20626-1 advisory. Changes in podman: - Add symlink to catatonit in /usr/libexec/podman bsc1248988 - CVE-2025-47914: Fixed...

OPENSUSE-SU-2026:10308-1 virtiofsd-1.13.2-2.1 on GA media

These are all security issues fixed in the virtiofsd-1.13.2-2.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-29074 SVGO: DoS through entity expansion in DOCTYPE (Billion Laughs)

SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files. From version 2.1.0 to before version 2.8.1, from version 3.0.0 to before version 3.3.3, and before version 4.0.1, SVGO accepts XML with custom entities, without guards against entity expansi...

PT-2026-23665

Name of the Vulnerable Software and Affected Versions AWS Lambda affected versions not specified Description Actions that insert URLs into the content attribute of HTML meta tags are not properly escaped. This can lead to cross-site scripting XSS if the meta tag also includes an http-equiv...

PT-2026-23661

Name of the Vulnerable Software and Affected Versions AWS Lambda affected versions not specified Description The url.Parse function did not properly validate the host or authority component of URLs, allowing the acceptance of invalid URLs. This issue impacts the standard library in 27 Lambda base...

PT-2026-23752

Name of the Vulnerable Software and Affected Versions Parse Server versions prior to 8.6.5 Parse Server versions prior to 9.5.0-alpha.3 Description The readOnlyMasterKey can be misused to create and delete files through the Files API. Specifically, the API endpoints /files/:filename POST and DELE...

osbuild-composer security update

101.4-4.0.1 - Support using repository definitons with OCI variables JIRA: OLDIS-38657 - Update repositories to contain OCI variables - Remove image types Minimal-raw and wsl JIRA: OLDIS-38123 - Increase default /boot size to 1GB Orabug: 36827079 - support for building OL8/9 images on Oracle Linu...