Important: .NET 9.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 9.0.119 and .NET Runtime 9.0.18...

Fedora 44 : erlang (2026-dcf80dc1ff)

"The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-dcf80dc1ff advisory. Backport fixes for CVE-2026-48858 ftp SSRF, CVE-2026-49759 SCTP DoS, CVE-2026-48860 dist-over-TLS auth bypass, CVE-2026-54886 ssh SFTP DoS,...

perl-DBI-1.651.0-1.1 on GA media (moderate)

perl-DBI-1.651.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11298-1 Rating: moderate Cross-References: CVE-2026-15043 CVE-2026-15392 CVE-2026-60081 CVE-2026-60082 CVSS scores: CVE-2026-15043 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2026-15043 SUSE : 6.9...

MGASA-2026-0265 Updated rsync package fixes security vulnerabilities

The updated package fixes security vulnerabilities: Rsync 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File Write. CVE-2026-29518 Rsync 3.4.3 Authorization Bypass via Hostname Resolution. CVE-2026-43617 Rsync 3.4.3 Integer Overflow Information Disclosure. CVE-2026-43618 Rsync 3.4.3...

SUSE-SU-2026:22872-1 Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIGX86 is set bsc1256615. - CVE-2026-23393: bridge: cfm: Fix race condition in peermep deletion bsc1260524. -...

MGASA-2026-0261 Updated upower packages fix security vulnerabilities

The updated packages fix some security issues...

Updated upower packages fix security vulnerabilities

The updated packages fix some security issues...

Fedora 43 : ruby (2026-7b7c2b373e)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7b7c2b373e advisory. Ruby 3.4.10 is released. This new version contains severay security bug fixes in zlib, net-imap and erb.. Tenable has extracted the preceding...

gomuks-26.03+git.1780250926.564a8707-1.1 on GA media (moderate)

gomuks-26.03+git.1780250926.564a8707-1.1 on GA media Announcement ID: openSUSE-SU-2026:11290-1 Rating: moderate Cross-References: CVE-2026-25681 CVE-2026-27136 CVE-2026-33809 CVE-2026-39821 CVE-2026-42502 CVE-2026-42506 CVSS scores: CVE-2026-25681 SUSE : 6.1...

nginx-1.31.3-1.1 on GA media (moderate)

nginx-1.31.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:11295-1 Rating: moderate Cross-References: CVE-2026-42533 CVE-2026-56434 CVE-2026-60005 CVSS scores: CVE-2026-42533 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2026-42533 SUSE : 9.2...

GHSA-CHGR-C6PX-7XPP vulnerabilities

Vulnerabilities for packages: py3-xet-core...

GHSA-QPX7-R6J6-CQF3 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-FVWF-CX56-8X5C vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-36HH-V3QG-5JQ4 vulnerabilities

Vulnerabilities for packages: py3-xet-core...

GHSA-HWPQ-HMQ9-WJ77 vulnerabilities

Vulnerabilities for packages: nemo...

Oracle Linux 10 : go-fdo-server (ELSA-2026-19137)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19137 advisory. - Rebuild to fix CVE-2026-32282 and CVE-2025-68121 Tenable has extracted the preceding description block directly from the Oracle Linux security...

SUSE SLES16: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc (SUSE-SU-2026:22646-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22646-1 advisory. This update for tomcat fixes the following issues Update to Tomcat 9.0.119. Security issues fixed: - CVE-2026-50229: improper...

GHSA-74J5-XF3V-CRQ8 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, datadog-operator, datadog-agent, vitess...

SUSE-SU-2026:3088-1 Security update for tomcat

This update for tomcat fixes the following issues Update to Tomcat 9.0.119. Security issues fixed: - CVE-2026-50229: improper neutralization of script-related HTML tags in the number guess example bsc1269791. - CVE-2026-53404: always-incorrect control flow implementation in the rewrite valve caus...

Security update for tomcat11

This update for tomcat11 fixes the following issues Update to Tomcat 11.0.23. Security issues fixed: CVE-2026-50229: improper neutralization of script-related HTML tags in the number guess example bsc1269791. CVE-2026-53404: always-incorrect control flow implementation in the rewrite valve caused...