Fedora 44 : libgit2 / rust-libgit2-sys (2026-9d59721e9b)

The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-9d59721e9b advisory. - Update libgit2 to version 1.9.6. - Update the libgit2-sys Rust crate to the corresponding version 0.18.7. This includes fixes for various security...

Fedora 44 : lego (2026-30e8e9a2b2)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-30e8e9a2b2 advisory. Update to 5.3.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

RockyLinux 8 : java-17-openjdk (RLSA-2026:42887)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:42887 advisory. JDK: Enhance TLS certificate handling CVE-2026-46968 JDK: Improve DTLS handshaking CVE-2026-46917 JDK: Enhance JPEG handling CVE-2026-47010 JDK: Enhance...

Fedora 43 : python-idna (2026-6215e65f6c)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6215e65f6c advisory. Update to the latest version to bring fixes for CVE-2026-45409 and CVE-2024-3651 into the stable releases. Tenable has extracted the preceding...

Debian dla-4700 : linux-config-6.1 - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4700 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4700-1 [email protected]...

GHSA-3RP5-JJMW-4WV2 vulnerabilities

Vulnerabilities for packages: mlflow-fips, datahub-ingestion, jupyter-all-spark-notebook, mlflow, awx, datahub-ingestion-fips, opal...

GHSA-G35J-M5XG-VH3Q vulnerabilities

Vulnerabilities for packages: rke2-runtime, spegel-fips, rke2-runtime-fips, spegel, ipfs-cluster-fips, ipfs-cluster, kubo, k3s...

GHSA-JPCW-4WR7-C3VQ vulnerabilities

Vulnerabilities for packages: nuclei, timoni, crossplane-provider-aws-s3, crossplane-provider-aws-dynamodb, crossplane-provider-aws-ec2, crossplane-provider-aws-iam, crossplane-provider-aws-memorydb, crossplane-provider-aws-sns, hugo-extended, crossplane-provider-azure-sql,...

GHSA-7PPR-R889-MCF2

creationtimestamp| type| source ---|---|--- 2026-07-25 18:31:07+00:00| seen| https://gist.github.com/alon710/d38237d2a40144ae6c46815cd07e6744...

GHSA-P6PH-3JX2-3337

creationtimestamp| type| source ---|---|--- 2026-07-25 16:31:29+00:00| seen| https://gist.github.com/alon710/7ac48e75205a16d278d7edd78b6790dd...

GHSA-86CX-WWF4-PHQ4

creationtimestamp| type| source ---|---|--- 2026-07-25 15:32:47+00:00| seen| https://gist.github.com/alon710/341e4798332dfd78cba00be899ecacf7...

GHSA-XQP3-JQ6G-X3QM vulnerabilities

Vulnerabilities for packages: filebrowser...

GHSA-6V4M-FW66-8R4X

creationtimestamp| type| source ---|---|--- 2026-07-25 13:48:43+00:00| seen| https://gist.github.com/alon710/4f741e2f37db8bd62ab69cf05173516c...

GHSA-R292-9MHP-454M

creationtimestamp| type| source ---|---|--- 2026-07-25 12:00:55+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mrhsyv23a525 2026-08-22 12:01:23+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mtoa3ig3u42e...

GHSA-Q53C-4PRM-W95Q

creationtimestamp| type| source ---|---|--- 2026-07-25 11:31:34+00:00| seen| https://gist.github.com/alon710/7d82b3a29a466133e3b991f0cb56fd86...

GHSA-GM3R-Q2WP-HW87

creationtimestamp| type| source ---|---|--- 2026-07-25 10:31:26+00:00| seen| https://gist.github.com/alon710/8ae8c0df3840a4fc9ad0abc329a9ce1f...

DEBIAN-CVE-2026-64485

In the Linux kernel, the following vulnerability has been resolved: ALSA: compress: Fix task creation error unwind sndcomprtasknew allocates the driver task before validating the returned DMA buffers and reserving file descriptors. When either of those later steps fails, the core frees its task...

DEBIAN-CVE-2026-64491

In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: us144mkii: fix work UAF on disconnect tascamdisconnect cancels capturework and midiinwork before usbkillanchoredurbs kills the capture/MIDI-in URBs. Those URBs self-resubmit, and their completion handlers reschedule...

DEBIAN-CVE-2026-64446

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix heap buffer overflow in rtwcfg80211setwpaie supplicantie is a 256-byte array in struct securitypriv. The WPA and WPA2 IE copy paths use: memcpypadapter-securitypriv.supplicantie, &pwpa0, wpaielen + 2; wher...

DEBIAN-CVE-2026-64437

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of a deferred filelock on SMB2CLOSE then SMB2CANCEL Commit f580d27e8928 "ksmbd: fix use-after-free of a deferred filelock on double SMB2CANCEL" made smb2cancel skip a work whose state is...