rust security update

1.92.0-2 - Apply libgit2 fix for CVE-2026-53587...

python-tornado security update

6.5.8-0.1 - Update to 6.5.8 Resolves: RHEL-247266...

CVE-2023-32803

The ca-certificates package on Amazon Linux 2 , Amazon Linux 2023 , and Amazon Linux AMI failed to properly remove certain TrustCor root certificates from the trust store. The flaw stems from an incorrect initial fix for CVE-2022-23491 . A remote attacker could potentially leverage the unremoved ...

CVE-2023-37366

CVE-2023-37366 is a remote denial-of-service vulnerability in Samsung Exynos mobile, automotive, and modem processors (including Exynos 9810 through 2200, Modem 5123/5300, and Auto T5123). The root cause is in cd_parseMsg (file cd_codec.c) within the Shannon SM Task, where improper input validati...

About the security content of iOS 26.7 and iPadOS 26.7

About the security content of iOS 26.7 and iPadOS 26.7 This document describes the security content of iOS 26.7 and iPadOS 26.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

ALSA-2026:67314 Important: nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 For more details about the security issues, including the impac...

CVE-2023-50459

CVE-2023-50459 affects the in2code/femanager extension for TYPO3 (versions 7.x before 7.2.3 ). The root cause is broken access control in the edit user component, which fails to verify permissions. An authenticated frontend user can exploit this to edit data or delete accounts of various other fr...

CVE-2023-24286

sgt-puzzles (Portable Puzzle Collection) versions before 20230116.5782e29 contain a buffer overflow in the Mosaic puzzle , triggerable via a crafted save file (game description parameter). The vulnerability carries a CVSS 3.1 score of 2.9 (LOW) , with a local attack vector, high complexity, and l...

CVE-2023-24283

Portable Puzzle Collection (sgt-puzzles) versions before 20230116.5782e29 contain a buffer overflow in the Guess puzzle component, triggered by a crafted save file, leading to a Denial of Service . The CVSS 3.1 score is 2.9 (Low) , with a local attack vector and high complexity. An upstream fix i...

python-tornado security update

6.5.8-0.1 - Update to 6.5.8 Resolves: RHEL-247281...

openssl security, bug fix, and enhancement update

3.5.8-1.0.1 - Replace upstream references Orabug: 34340177 - Update FIPS provider name Orabug: 35824276 1:3.5.8-1 - Rebase to OpenSSL 3.5.8 Resolves: RHEL-242944 Resolves: RHEL-246254 Resolves: RHEL-246266 Resolves: RHEL-246306 Resolves: RHEL-246437 Resolves: RHEL-246441 Resolves: RHEL-246445...

Oracle Linux 9 : ELSA-2026-67165-0: / openssl (ELSA-2026-671650)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-671650 advisory. 3.5.8-1.0.1 - Replace upstream references Orabug: 34340177 3.5.8.openela.0.1 - Add OpenELA specific changes 1:3.5.8-1 - Rebase to OpenSSL 3.5.8...

Oracle Linux 9 : ELSA-2026-67285-0: / rust (ELSA-2026-672850)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-672850 advisory. 1.92.0-2 - Apply libgit2 fix for CVE-2026-53587 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

RHEL 10 : tomcat9 (RHSA-2026:67163)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67163 advisory. Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages...

RHEL 8 : perl:5.32 (RHSA-2026:67278)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:67278 advisory. Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fixes: perl: Perl:...

gstreamer1-plugins-base security update

1.16.1-7.0.1 - Update origin URL Orabug: 36209826 1.16.1-7 - Add patch for CVE-2026-85150 Resolves: RHEL-253741 1.16.1-6.1 - Add patch for CVE-2026-18297 Resolves: RHEL-246576...

ALSA-2026:67278 Moderate: perl:5.32 security update

Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fixes: perl: Perl: Incorrect regular expression processing via large regular expressions CVE-2026-13221 For more details about the security issues, including the impac...

ALSA-2026:67156 Moderate: perl security update

Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fixes: perl: Perl: Incorrect regular expression processing via large regular expressions CVE-2026-13221 For more details about the security issues, including the impac...

GHSA-2883-XCG3-V3HH

creationtimestamp| type| source ---|---|--- 2026-09-13 23:02:40+00:00| seen| https://gist.github.com/konard/3df64f94bedef28845e3787306d32d25 2026-09-14 00:01:28+00:00| seen| https://gist.github.com/konard/3df64f94bedef28845e3787306d32d25 2026-09-15 12:45:46+00:00| seen|...

UBUNTU-CVE-2026-90576

A security vulnerability has been detected in GPAC up to f1219cde. Affected is the function gfnodelistaddchild of the file scenegraph/basescenegraph.c of the component MP4Box. Such manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The explo...