DEBIAN-CVE-2026-64394

In the Linux kernel, the following vulnerability has been resolved: ksmbd: add a WRITEDAC/WRITEOWNER check to SMB2 SETINFO SECURITY commit cc57232cae23 "ksmbd: fix FSCTL permission bypass by adding a permission check for FSCTLSETSPARSE" added a fp-daccess gate to fsctlsetsparse and noted that...

DEBIAN-CVE-2026-64375

In the Linux kernel, the following vulnerability has been resolved: proc: protect ptracemayaccess with execupdatelock FD links procpidgetlink and procpidreadlink currently look up the task from the pid once, then do the ptrace access check on that task, then look up the task from the pid a second...

DEBIAN-CVE-2026-64356

In the Linux kernel, the following vulnerability has been resolved: xfs: fix memory leak in xfsdqinodemetadircreate If xfsmetadircreate fails in xfsdqinodemetadircreate, the current code returns directly, leaking the allocated update and transaction state. If the subsequent commit fails, the...

DEBIAN-CVE-2026-64294

In the Linux kernel, the following vulnerability has been resolved: mm: do file ownership checks with the proper mount idmap Ever since idmapped mounts were introduced, inode ownership checks for side-channel protection in mincore and madviseMADVPAGEOUT were done against the nopmntidmap, which...

CVE-2026-64298

In the Linux kernel, the following vulnerability has been resolved: NFSv4: include MAYWRITE in open permission mask for OTRUNC POSIX requires write permission to truncate a file, so an open that specifies OTRUNC must be authorized for write access regardless of the OACCMODE access mode...

GHSA-6XJ8-QV9J-XCJQ

creationtimestamp| type| source ---|---|--- 2026-07-25 07:31:13+00:00| seen| https://gist.github.com/alon710/e9c3b68dd2dd0898bdce9f4d836eceff...

GHSA-HMJ8-5XMH-5573

creationtimestamp| type| source ---|---|--- 2026-07-25 05:31:39+00:00| seen| https://gist.github.com/alon710/610364d1088c3e73d54d1422be1a22f2...

GHSA-XG4H-6GFC-H4M8

creationtimestamp| type| source ---|---|--- 2026-07-25 03:31:51+00:00| seen| https://gist.github.com/alon710/0779a48575ed13d9f77e2dad5309ea43...

GHSA-MH99-V99M-4GVG

creationtimestamp| type| source ---|---|--- 2026-07-25 03:24:18+00:00| seen| https://gist.github.com/BrendanPatric/94f86501f020c7775dbd8239cf371c2e 2026-08-28 09:35:37+00:00| seen| https://gist.github.com/konard/4ba388beb31caacd09fbc15019f8e274...

GHSA-J6G5-3HH3-PGW8

creationtimestamp| type| source ---|---|--- 2026-07-25 02:43:25+00:00| seen| https://gist.github.com/alon710/6a8c8e9d5478e9dc83fe93da983dd382...

GHSA-4VJ7-5MJ6-JM8M vulnerabilities

Vulnerabilities for packages: tileserver-gl...

GHSA-72GW-FMMR-C4R4 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

GHSA-M2W4-8GGF-RJ47 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector...

GHSA-3PJW-73GF-8QR5 vulnerabilities

Vulnerabilities for packages: opensearch, spark, sonarqube, flyway, akhq...

GHSA-JPCW-4WR7-C3VQ

creationtimestamp| type| source ---|---|--- 2026-07-25 01:39:15+00:00| seen| https://gist.github.com/alon710/b490d29b6d050fb00e7a5ccf95bdfcac...

GHSA-8Q49-2H5H-434X

creationtimestamp| type| source ---|---|--- 2026-07-25 00:32:46+00:00| seen| https://gist.github.com/alon710/2148318b0f0c526c708bd7a87404909b...

openSUSE 16 Security Update : hauler (openSUSE-SU-2026:21433-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21433-1 advisory. Changes in hauler: - update embedded dependency x/net to 0.57 to fix CVE-2026-39821 bsc1266602 Tenable has extracted the preceding description block...

Fedora 44 : dotnet10.0 (2026-f738966fc9)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f738966fc9 advisory. Update to .NET SDK 10.0.110 and Runtime 10.0.10 Fixes:...

Fedora 43 : sssd (2026-9ab663dcd4)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9ab663dcd4 advisory. CVE fixes: CVE-2026-12610 CVE-2026-14474 CVE-2026-14476 - rhbz2494777: CVE-2026-12610 sssd: Use-after-free crash in SSSD' 'sssdpam' process -...

Fedora 44 : skopeo (2026-9b2e56edf5)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-9b2e56edf5 advisory. Security fix for CVE-2026-27145 Go stdlib crypto/x509 DoS vulnerability. Rebuild with golang-1.26.5 which includes the fix. Tenable has extracted the precedi...