Oracle Linux 9 : freerdp (ELSA-2026-2048)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-2048 advisory. 2:2.11.7-1.1 - Backport several CVE fixes Resolves: RHEL-142426, RHEL-142410, RHEL-142394, RHEL-142378, RHEL-142362, Resolves: RHEL-142346, RHEL-142330...

OPENSUSE-SU-2026:10149-1 cockpit-repos-4.7-2.1 on GA media

These are all security issues fixed in the cockpit-repos-4.7-2.1 package on the GA media of openSUSE Tumbleweed...

freerdp security update

2:2.11.7-1.1 - Backport several CVE fixes Resolves: RHEL-142426, RHEL-142410, RHEL-142394, RHEL-142378, RHEL-142362, Resolves: RHEL-142346, RHEL-142330...

OPENSUSE-SU-2026:10151-1 python311-wheel-0.46.3-1.1 on GA media

These are all security issues fixed in the python311-wheel-0.46.3-1.1 package on the GA media of openSUSE Tumbleweed...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.19.23 bug fix and security update

Red Hat OpenShift Container Platform release 4.19.23 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...

CVE-2026-23097

In the Linux kernel, the following vulnerability has been resolved: migrate: correct lock ordering for hugetlb file folios Syzbot has found a deadlock analyzed by Lance Yang: 1 Task 5749: Holds foliolock, then tries to acquire immaprwsemread lock. 2 Task 5754: Holds immaprwsemwrite lock, then tri...

Important: Red Hat Security Advisory: Red Hat Quay 3.15.3

Red Hat Quay 3.15.3 is now available with bug fixes. Quay 3.15.3...

Grok continues producing sexualized images after promised fixes

Journalists decided to test whether the Grok chatbot still generates non‑consensual sexualized images, even after xAI, Elon Musk’s artificial intelligence company, and X, the social media platform formerly known as Twitter, promised tighter safeguards. Unsurprisingly, it does. After scrutiny from...

Security update for java-1_8_0-ibm

This update for java-180-ibm fixes the following issues: Security fixes: - CVE-2026-21925: Fixed Oracle Java SE component RMI bsc1257034 - CVE-2026-21932: Fixed Oracle Java SE component AWT and JavaFX bsc1257036 - CVE-2026-21933: Fixed Oracle Java SE component Networking bsc1257037 -...

SUSE-SU-2026:20231-1 Security update for cups

This update for cups fixes the following issues: Update to version 2.4.16. Security issues fixed: - CVE-2025-61915: local denial-of-service via cupsd.conf update and related issues bsc1253783. - CVE-2025-58436: slow client communication leads to a possible DoS attack bsc1244057. - CVE-2025-58364:...

OPENSUSE-SU-2026:10146-1 libpainter0-0.9.27-1.1 on GA media

These are all security issues fixed in the libpainter0-0.9.27-1.1 package on the GA media of openSUSE Tumbleweed...

openSUSE 16 Security Update : kernel (openSUSE-SU-2026:20145-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20145-1 advisory. The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38704:...

DNN DotNetNuke.Core < 9.13.10 / 10.0 < 10.2.0 XSS

According to its self-reported version, the instance of DNN formerly DotNetNuke running on the remote web server is prior to 9.13.10 and 10.2.0. It is, therefore, affected by a cross-site scripting vulnerability: - DNN formerly DotNetNuke is an open-source web content management platform CMS in t...

openSUSE 16 Security Update : elemental-register, elemental-toolkit (openSUSE-SU-2026:20132-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20132-1 advisory. elemental-register was updated to 1.8.1: Changes on top of v1.8.1: Update headers to 2026 Update questions to include SL Micro 6.2 Update to...

OPENSUSE-SU-2026:10145-1 python312-Django6-6.0.2-1.1 on GA media

These are all security issues fixed in the python312-Django6-6.0.2-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE SLES16 Security Update : java-17-openjdk (SUSE-SU-2026:20199-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:20199-1 advisory. Upgrade to upstream tag jdk-17.0.18+8 January 2026 CPU Security fixes: - CVE-2026-21925: Fixed Oracle Java SE component RMI...

Ubuntu 20.04 LTS : MySQL vulnerabilities (USN-8006-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8006-1 advisory. Multiple security issues were discovered in MySQL and this update includes a new upstream MySQL version to fix these issues. MySQL has been updated to...

OPENSUSE-SU-2026:10144-1 expat-2.7.4-1.1 on GA media

These are all security issues fixed in the expat-2.7.4-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-36033

IBM Engineering Lifecycle Management - Global Configuration Management 7.0.3 through 7.0.3 Interim Fix 017, and 7.1.0 through 7.1.0 Interim Fix 004 IBM Global Configuration Management is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary...

EUVD-2025-206631

Fast DDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group . Prior to versions 3.4.1, 3.3.1, and 2.6.11, when the security mode is enabled, modifying the DATA Submessage within an SPDP packet sent by a publisher causes a heap buffer overflow,...