472419 matches found
postgresql16-postgis security update
3.5.3-4.1 - Fix CVE-2026-73515: validate flatgeobuf input buffers before decoding...
httpd:2.4 security update
httpd 2.4.37-65.0.1.8 - Replace index.html with Oracle's index page oracleindex.html 2.4.37-65.8 - Resolves: RHEL-173558 - httpd:2.4/httpd: Apache HTTP Server modproxyajp: Arbitrary code execution via heap-based buffer overflow CVE-2026-28780 - Resolves: RHEL-175074 - httpd:2.4/httpd: NULL pointe...
PT-2026-89396
Name of the Vulnerable Software and Affected Versions Renovate versions prior to 44.14.7 Description A command injection issue exists in the gomod manager when processing unescaped depName parameters during import-path update commands while operating in binarySource=docker mode. This occurs durin...
CVE-2026-88885: Improper Neutralization of Special Elements used in an OS Command
Renovate before 44.14.7 contains a command injection vulnerability in the gomod manager when processing unescaped depName parameters in import-path update commands with binarySource=docker mode. Attackers can inject shell metacharacters through malicious dependency names to execute arbitrary...
freerdp security update
2:2.11.7-7.7 - Fix RPC gateway fragment size and capacity checks CVE-2026-55193 Resolves: RHEL-247356...
Fedora 44 : GitPython (2026-1cb04a54d8)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-1cb04a54d8 advisory. Update to 3.1.62 close RHBZ2529282 - Fixes GHSA-hmq2-w58f-27jc Tenable has extracted the preceding description block directly from the Fedora security...
JetBrains YouTrack < 2025.3.160480 / 2026.1.x < 2026.1.14047 Improper Access Control (CVE-2026-86498)
The version of JetBrains YouTrack installed on the remote host is prior to 2025.3.160480, or 2026.1.x prior to 2026.1.14047. It is, therefore, affected by an improper access control vulnerability: - In JetBrains YouTrack before 2025.3.160480, 2026.1.14047 PUT requests on link sub-resources allowe...
Oracle Linux 8 : ELSA-2026-64823-0: / redis:6 (ELSA-2026-648230)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-648230 advisory. 6.2.24-1.0.1 - Build with 64k pages to support redis on both UEK6 and UEK7 on aarch64 6.2.24-1 - rebase to 6.2.24 for CVE-2026-66373 Tenable has...
RHEL 8 : freerdp (RHSA-2026:66281)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:66281 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...
OPENSUSE-SU-2026:11747-1 python310-3.10.21-1.1 on GA media
These are all security issues fixed in the python310-3.10.21-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11742-1 google-guest-agent-20260903.01-1.1 on GA media
These are all security issues fixed in the google-guest-agent-20260903.01-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11745-1 perl-HTML-FormHandler-0.410.2-1.1 on GA media
These are all security issues fixed in the perl-HTML-FormHandler-0.410.2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11743-1 google-osconfig-agent-20260908.00-1.1 on GA media
These are all security issues fixed in the google-osconfig-agent-20260908.00-1.1 package on the GA media of openSUSE Tumbleweed...
Important: git-lfs security update
Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fixes: encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal...
Security update for helm (important)
openSUSE security update: security update for helm ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21809-1 Rating: important References: bsc1270127 bsc1271660 bsc1272402 bsc1276514 bsc1276644 bsc1277949 bsc1278270 bsc1278273 bsc1278688...
chromedriver-152.0.7977.82-1.1 on GA media (moderate)
chromedriver-152.0.7977.82-1.1 on GA media Announcement ID: openSUSE-SU-2026:11714-1 Rating: moderate Cross-References: CVE-2026-84323 CVE-2026-84324 CVE-2026-84325 CVE-2026-84326 CVE-2026-84327 CVE-2026-84328 CVE-2026-84329 CVE-2026-84330 CVE-2026-84331 CVE-2026-84332 CVE-2026-84333 CVE-2026-843...
Oracle Linux 7 : gstreamer1-plugins-bad-free (ELSA-2026-54752)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54752 advisory. - Security update for CVE-2026-59691 CVE-2026-59692 Orabug: 39878399 - Security update for CVE-2026-52720 CVE-2026-52722 Orabug: 39799399 Tenable has...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: hugo: hugo-0.166.0-0.1.hum1 aarch64, x8664 hugo-0.166.0-0.1.hum1.src src...
Critical: Red Hat Security Advisory: Updated Container Images: HawtIO 4.4.1 for Red Hat build of Apache Camel 4 Release and security update.
Updated container images are now available The container images have been updated to address the following security advisory: RHSA-2026:42952 see References Users of container images are advised to upgrade to these updated images, which contain backported patches to correct these security issues,...