[SECURITY] [DSA 6370-1] xorg-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6370-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 27, 2026 https://www.debian.org/security/faq -...

corepack24-24.17.0-1.1 on GA media (moderate)

corepack24-24.17.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11121-1 Rating: moderate Cross-References: CVE-2026-11525 CVE-2026-12151 CVE-2026-2581 CVE-2026-27135 CVE-2026-40170 CVE-2026-42338 CVE-2026-48615 CVE-2026-48617 CVE-2026-48618 CVE-2026-48619 CVE-2026-48928 CVE-2026-48930...

GHSA-JM82-FX9C-MX94 vulnerabilities

Vulnerabilities for packages: open-webui, nemo...

GHSA-3M6Q-JJ5J-38C9 vulnerabilities

Vulnerabilities for packages: ruby3.4-fluentd-kubernetes-daemonset, kube-logging-operator, ruby3.3-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset...

GHSA-PWFV-328H-75X9 vulnerabilities

Vulnerabilities for packages: rclone, hugo-extended, seaweedfs, mailpit, mattermost, hugo, filebrowser...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: gitlab-kas, cilium, telegraf, kots, cilium-cli, minio, k3s, snyk-cli, fscrypt, aactl, kubernetes, podman, kaf, buildah, kine, prometheus, containerd, istio, kubernetes-dashboard, docker-cli-buildx, zot, cert-manager, mattermost, knative-serving, prometheus-operator,...

RLSA-2026:29455 Important: buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a...

Security Bulletin: Multiple Vulnerabilities in WebSphere Application Server Liberty affect IBM Cloud Pak System [CVE-2024-56339. CVE-2023-50314]

Summary Vulnerabilities in IBM WebSphere Application Server Liberty affect IBM Cloud Pak System. Vulnerability Details CVEID:CVE-2024-56339 DESCRIPTION: IBM WebSphere Application Server 9.0 and WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.7 could allow a remote attacker to bypass...

GHSA-47QP-HQVX-6R3F vulnerabilities

Vulnerabilities for packages: tez, confluent-kafka, druid, apache-pulsar, apache-nifi, kafka, zookeeper...

EUVD-2021-34853

Parse Server before 4.10.0 was affected by a supply chain incident in which incorrect version tags were pushed to the official repository pointing to an unreviewed personal fork of a contributor with write access. No releases were published with these tags; a project was exposed only if it define...

SUSE SLES16: postgresql14 / postgresql14-contrib / postgresql14-devel / etc (SUSE-SU-2026:22177-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22177-1 advisory. This update for postgresql14 fixes the following issues Security issues: - CVE-2026-6472: ensure the user has CREATE privilege on...

SUSE SLES12: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2026:2583-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2583-1 advisory. Update to Firefox 140.12.0 ESR MFSA 2026-58, bsc1268071: - CVE-2026-12289: Privilege escalation in the Graphics: WebRender component. -...

SUSE SLES15: kernel-livepatch-6_4_0-150600_23_95-default / etc (SUSE-SU-2026:2520-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2520-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.95 fixes various security issues The following security issues were fixed: -...

SUSE SLES12: apache2 / apache2-devel / apache2-doc / apache2-example-pages / etc (SUSE-SU-2026:2641-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2641-1 advisory. This update for apache2 fixes the following issues Update to 2.4.66 jscPED-16334: Security issues: - CVE-2026-23918: http2: double free and...

Oracle Linux 9 : openssl (ELSA-2026-25239)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-25239 advisory. - Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,...

SUSE SLES12: kernel-livepatch-6_4_0-150600_23_112-default / etc (SUSE-SU-2026:2553-1)

The remote SUSE Linux SLES12 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2553-1 advisory. This update for the SUSE Linux Enterprise Kernel 4.12.14-122.310 fixes various security issues The following security issues were fixe...

Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-50319)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50319 advisory. - netfilter: nftables: unconditionally bump set-nelems before insertion Pablo Neira Ayuso Orabug: 39562729 CVE-2026-23272 - net: bonding: fix...

GHSA-638V-9W3R-GH6Q vulnerabilities

Vulnerabilities for packages: expat...

GHSA-FCHF-WVCC-QF9G vulnerabilities

Vulnerabilities for packages: expat...

samba security, bug fix, and enhancement update

An update is available for openchange, evolution-mapi. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Samba is an open-source implementation of the Server Messa...