RHSA-2026:36073 Red Hat Security Advisory: kernel security update

Bulletin has no description...

DEBIAN-CVE-2026-56000

Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, due to CommonMakeCurrent pointing into potentially reallocated memory...

GHSA-9G8F-H8F3-HJCM

creationtimestamp| type| source ---|---|--- 2026-07-08 05:00:05+00:00| seen| https://bsky.app/profile/selfhost.directory/post/3mq4dkpqdgy2h...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: golang1.25: golang1.25-1.25.12-0.1.hum1 aarch64, x8664 golang1.25-bin-1.25.12-0.1.hum1 aarch64, x8664 golang1.25-docs-1.25.12-0.1.hum1 noarch golang1.25-misc-1.25.12-0.1.hum1 noarch...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to improper enforcement of the minimum authentication delay in the sshd process. An attacker can increase the rate of authentication attempts by exploiting this timing issue...

GHSA-RMMH-P597-PPVV vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, wazuh-dashboard-fips, wazuh-dashboard, opensearch-dashboards-fips...

GHSA-J4JV-FP59-574F vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-aws, linux-vmware, linux-qemu, linux-gcp...

GHSA-4RJ2-PR7F-CMPG vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-aws, linux-vmware, linux-qemu, linux-gcp...

GHSA-H634-6F45-J5WJ vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-aws, linux-vmware, linux-qemu, linux-gcp...

GHSA-6GQ6-HXJH-9GRQ vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-aws, linux-vmware, linux-qemu, linux-gcp...

GHSA-JMF6-3V74-7X28 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-aws, linux-vmware, linux-qemu, linux-gcp...

GHSA-MP79-8QQ6-QP9G vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-aws, linux-vmware, linux-qemu, linux-gcp...

GHSA-HHXP-R7J7-V7JV vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-azure, linux-aws, linux-vmware, linux-qemu, linux-gcp...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: golang1.26: golang1.26-1.26.5-0.1.hum1 aarch64, x8664 golang1.26-bin-1.26.5-0.1.hum1 aarch64, x8664 golang1.26-docs-1.26.5-0.1.hum1 noarch golang1.26-misc-1.26.5-0.1.hum1 noarch...

EUVD-2026-42124

DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders. The fix for CVE-2026-10879 did not allocate enough memory to handle approximately 1.2-million placeholders. DBI version 1.650 sets a hard limit of 99,999 placeholders...

CVE-2026-53530

creationtimestamp| type| source ---|---|--- 2026-07-08 00:35:13+00:00| published-proof-of-concept| https://github.com/erweixin/RaTeX/security/advisories/GHSA-4hgp-59h5-gvrj...

Medium: containerd

Issue Overview: x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused strings.Splithost, "." to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically bas...

Important: tigervnc

Issue Overview: A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. XkbSetMapChecks declares a fixed-size stack buffer mapWidths256 indexed by key type index. The helper function CheckKeyTypes writes to this buffer at a client-controlled offset, allowing a stack buffe...

Fedora 44 : betterleaks (2026-6f573784e6)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6f573784e6 advisory. Update to 1.6.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 43 : perl-JavaScript-Minifier-XS (2026-629b796808)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-629b796808 advisory. 0.16 bump - Fix CVE-2026-56017 and CVE-2026-56018 Tenable has extracted the preceding description block directly from the Fedora security advisory...