Rocky Linux 8.6 [CIQ] Security Update: cloud-init (ciqsa-2026_0018)

The Rocky Linux 8.6 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20260018 advisory. This advisory aggregates security fixes for the cloud-init SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2024-6174. Tenable has extracted the preceding description...

Rocky Linux 9.4 [CIQ] Security Update: cloud-init (ciqsa-2026_0522)

The Rocky Linux 9.4 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20260522 advisory. This advisory aggregates security fixes for the cloud-init SRPM in CIQ LTS 9.4. It addresses 1 CVE: CVE-2024-6174. Tenable has extracted the preceding description...

AlmaLinux 9.2 [TuxCare] Security Update: cloud-init (ALMALINUX9.2:CLSA-2025:1760025490)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1760025490 advisory. - Sensitive data could be exposed in logs of cloud-init before version 23.1.2. An attacker could use this information to find hashed password...

CLEANSTART-2024-OZ46983 When instructing cloud-init to set a random password for a new user account, versions before 21

Security vulnerability affects the cloud-init package. When instructing cloud-init to set a random password for a new user account, versions before 21...

CLEANSTART-2024-WH54891 Sensitive data could be exposed in world readable logs of cloud-init before version 22

Security vulnerability affects the cloud-init package. Sensitive data could be exposed in world readable logs of cloud-init before version 22...

CLEANSTART-2024-JF46935 Sensitive data could be exposed in logs of cloud-init before version 23

Security vulnerability affects the cloud-init package. Sensitive data could be exposed in logs of cloud-init before version 23...

AlmaLinux 9.2 [TuxCare] Security Update: openexr / openexr-devel / openexr-libs Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1778756042)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778756042 advisory. - OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion...

Rocky Linux 9.6 [TuxCare] Security Update: opensc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1778493745)

The Rocky Linux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778493745 advisory. - A vulnerability was found in OpenSC, OpenSC tools, PKCS11 module, minidriver, and CTK. The problem is missing initialization of...

AlmaLinux 9.2 [TuxCare] Security Update: cloud-init Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1760018787)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1760018787 advisory. - cloud-init through 25.1.2 includes the systemd socket unit cloud-init-hotplugd.socket with default SocketMode that grants 0666...

PT-2026-102960

A vulnerability was detected in Nothings stb up to 2c980bb59875b0d32144a71867fbdebb2f77cd20. The impacted element is the function hexwave init in the library stb hexwave.h. Performing a manipulation of the argument width/oversample results in integer overflow. Remote exploitation of the attack is...

Oracle Linux 8 : postgresql:12 (ELSA-2026-72274)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-72274 advisory. - add postgresql-CVE-2026-18408.patch - apply backport-of-the-patch-to-fix-CVE-2025-8714.patch - Resolves: CVE-2026-14662, CVE-2026-14664,...

AlmaLinux 9.2 [TuxCare] Security Update: opensc (ALMALINUX9.2:CLSA-2026:1779101894)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1779101894 advisory. - Several memory vulnerabilities were identified within the OpenSC packages, particularly in the card enrollment process using pkcs15-init wh...

AlmaLinux 9.2 [TuxCare] Security Update: opensc (ALMALINUX9.2:CLSA-2026:1788870088)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1788870088 advisory. - A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. A crafted USB device or smart card with malicious...

PT-2026-105623

These are all security issues fixed in the amazon-ecs-init-1.107.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11914-1 amazon-ecs-init-1.107.0-1.1 on GA media

These are all security issues fixed in the amazon-ecs-init-1.107.0-1.1 package on the GA media of openSUSE Tumbleweed...

GO-2026-6538 k8saudit shipped rules do not detect privileged/sensitive settings on init or ephemeral containers in github.com/falcosecurity/plugins/plugins/k8saudit

k8saudit shipped rules do not detect privileged/sensitive settings on init or ephemeral containers in github.com/falcosecurity/plugins/plugins/k8saudit...

CVE-2026-97935

The Linux kernel contains a slab-use-after-free vulnerability in the tracing subsystem. The issue occurs because hist_register_trigger() adds a histogram trigger to the global named_triggers list before validating the trace clock. If the clock string is unknown, tracing_set_clock() fails, causing...

CVE-2026-97572

In the Linux kernel, the following vulnerability has been resolved: bnxten: Propagate RX ring init failures in bnxtinitnic bnxtinitrxrings returns an error when bnxtalloconerxring fails, but bnxtinitnic discards that return value and calls bnxtinitchip, which enables TPA. If an allocation fails,...

PT-2026-98637

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the net: macb component during the probe error path. The macb mii init function creates a phylink instance, but if macb alloc tieoff or register netdev fails, the...

PT-2026-98664

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ltc428 clk provider setup function where the clk init data structure is not fully initialized. Specifically, the init.num parents member remains uninitialized, whi...