RLSA-2026:65895 Important: osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fixes: crypto/x50...

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

OPENSUSE-SU-2026:11744-1 libpcap-devel-1.10.7-1.1 on GA media

These are all security issues fixed in the libpcap-devel-1.10.7-1.1 package on the GA media of openSUSE Tumbleweed...

python3.12-lxml security update

4.9.3-2.1 - Fix CVE-2026-49825: add xlink:href to known HTML link attributes Resolves: RHEL-251488...

OPENSUSE-SU-2026:11748-1 python315-3.15.0~rc2-1.1 on GA media

These are all security issues fixed in the python315-3.15.0rc2-1.1 package on the GA media of openSUSE Tumbleweed...

git-lfs security update

3.7.1-4.3 - Rebuild with updated golang - Resolves: RHEL-241575, RHEL-242274, RHEL-241799...

OPENSUSE-SU-2026:11740-1 azure-storage-azcopy-10.32.8-1.1 on GA media

These are all security issues fixed in the azure-storage-azcopy-10.32.8-1.1 package on the GA media of openSUSE Tumbleweed...

Security update for helm (important)

openSUSE security update: security update for helm ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21809-1 Rating: important References: bsc1270127 bsc1271660 bsc1272402 bsc1276514 bsc1276644 bsc1277949 bsc1278270 bsc1278273 bsc1278688...

chromedriver-152.0.7977.82-1.1 on GA media (moderate)

chromedriver-152.0.7977.82-1.1 on GA media Announcement ID: openSUSE-SU-2026:11714-1 Rating: moderate Cross-References: CVE-2026-84323 CVE-2026-84324 CVE-2026-84325 CVE-2026-84326 CVE-2026-84327 CVE-2026-84328 CVE-2026-84329 CVE-2026-84330 CVE-2026-84331 CVE-2026-84332 CVE-2026-84333 CVE-2026-843...

vim security update

8.2.2637-26.0.1.el98.21 - Remove upstream references Orabug: 31197557 2:8.2.2637-26.21 - RHEL-253669 CVE-2026-28420 vim: buffer overflow in terminal emulator 2:8.2.2637-26.20 - RHEL-215664 CVE-2026-55892 vim: stack out-of-bounds write in dumpprefixes 2:8.2.2637-26.19 - RHEL-215684 CVE-2026-59857...

Oracle Linux 7 : gstreamer1-plugins-bad-free (ELSA-2026-54752)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54752 advisory. - Security update for CVE-2026-59691 CVE-2026-59692 Orabug: 39878399 - Security update for CVE-2026-52720 CVE-2026-52722 Orabug: 39799399 Tenable has...

Fedora 43 : libsoup3 (2026-fce2f41203)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-fce2f41203 advisory. Fixes lots of CVEs: see the fixes section for details Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 43 : freerdp2 (2026-3fe3e3ae10)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3fe3e3ae10 advisory. Backport several CVE fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...

CVE-2026-88282: Improper Neutralization of Special Elements used in an OS Command

GeoVision GV-LPC2211 V1.13 allows an administrator-controlled FTP username containing shell metacharacters to be executed as arbitrary root commands during a subsequent FTP-account update...

ALSA-2026:66451 Moderate: glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fixes: xdgmime: heap-based buffer...

Fedora 43 : gdk-pixbuf2 (2026-cf5d926f46)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-cf5d926f46 advisory. Fixes https://access.redhat.com/security/cve/CVE-2026-81893 ---- Fixes CVE-2026-16768: https://access.redhat.com/security/cve/CVE-2026-16768 Tenable...

Fedora 43 : freeipa / samba (2026-bf202f7b3b)

The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-bf202f7b3b advisory. Update to Samba 4.23.12 along with freeipa rebuild Tenable has extracted the preceding description block directly from the Fedora security advisory. Note tha...

CVE-2026-49838: Improper Validation of Array Index

GoBGP is an open source Border Gateway Protocol BGP implementation in the Go Programming Language. Prior to version 4.7.0, GoBGP accepts a zero-length ASPATH during UPDATE decoding and later panics while validating that attribute for a confederation eBGP peer. The vulnerable path is in the BGP...

Fedora 43 : openssl (2026-00b3d3d018)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-00b3d3d018 advisory. Rebase to OpenSSL 3.5.8 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

kernel security, bug fix, and enhancement update

4.18.0-553.162.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...