CVE-2026-77423

JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in less viewer passes user-controlled search and display-filter patterns from getPatternboolean doDisplayPattern in builtins/src/main/java/org/jline/builtins/Less.java directly to Java's...

Linux Distros Unpatched Vulnerability : CVE-2026-97408

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: L2CAP: validate connectionless PSM length Connectionless L2CAP frames carry a two-byte PSM at the start of the payload. l2caprecvframe currently read...

Linux Distros Unpatched Vulnerability : CVE-2026-97446

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ACPICA: Fix NULL pointer dereference in acpinscustompackage acpinscustompackage unconditionally dereferences the first element of the package to read the BIX...

Linux Distros Unpatched Vulnerability : CVE-2026-93812

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: fix sdndr.data memory leak in ksmbdvfssetsdxattr ndrencodev4ntacl allocates sdndr.data via kzalloc at entry. If any subsequent ndrwrite call returns erro...

Linux Distros Unpatched Vulnerability : CVE-2026-96674

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - alsa-lib through 1.2.16.1 computes combined topology element size using 32-bit arithmetic in src/topology/ctl.c, allowing integer overflow that defeats bounds...

Linux Distros Unpatched Vulnerability : CVE-2026-97454

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ACPICA: add boundary checks in acpipsgetnextfield Add boundary checks in acpipsgetnextfield to prevent out-of-bounds access. CVE-2026-97454 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2026-97509

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - thunderbolt: Keep XDomain reference during the lifetime of a service This is needed because we release the service ID in tbservicerelease and the ID array is...

CVE-2026-57178

Python Social Auth is a social authentication/registration mechanism...

CVE-2026-97404

In OpenStack Zaqar before 22.0.2, WSGI transport mishandles the URL-Si...

Linux Distros Unpatched Vulnerability : CVE-2026-96611

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In movreadispe, uint32t width/height values from a crafted HEIF ispe box are stored into...

Linux Distros Unpatched Vulnerability : CVE-2026-97443

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perf/ftrace: Fix WARNING in unregisterftracefunction perfftracefunctionunregister unconditionally calls unregisterftracefunction without checking whether the...

Linux Distros Unpatched Vulnerability : CVE-2026-96675

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - alsa-lib through 1.2.16.1 contains a denial of service vulnerability in the multi PCM plugin that fails to validate sparse binding indices before array access...

Linux Distros Unpatched Vulnerability : CVE-2026-97494

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: validate and share PSP fwpribuf copies via pspcopyfw Change pspcopyfw from void to int: return -ENODEV when drmdeventer fails, and -EINVAL when the...

Linux Distros Unpatched Vulnerability : CVE-2026-93278

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - staging: octeon: add missing napidisable in cvmoctrxshutdown cvmoctrxshutdown calls freeirq and netifnapidel without disabling the napi instance first. As the...

CVE-2026-88835

BusyBox dpkg readpackagefield steps past a NUL terminator on malformed .deb packages, causing an out-of-bounds heap read...

Linux Distros Unpatched Vulnerability : CVE-2026-97453

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ACPICA: validate bytecount in acpipsgetnextpackagelength Validate package length reading in acpipsgetnextpackagelength. CVE-2026-97453 Note that Nessus relies o...

Important: perl-DBI security update

The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent interface, meaning it defines a consistent set of methods, variables, and conventions for database operations. Security Fixes: perl-DBI: DBI for Perl: Heap...

cockpit-image-builder security update

94.4-1.0.1 - Switch to old frotend Orabug: 38011073 Orabug: 37856296 Orabug: 37856375 - Replaced additional upstream url Orabug: 37856187 - Replaced upstream urls in documentation with oracle links Orabug: 37856187 94.4-1 - New upstream release...

libxml2 security update

2.9.13-14.5 - Fix CVE-2026-86144 RHEL-256304 - Fix CVE-2026-86140 RHEL-256027 - Fix CVE-2026-74860 RHEL-256120 - Fix CVE-2026-86142 RHEL-256365 - Fix CVE-2026-86143 RHEL-256901 - Fix CVE-2026-86138 RHEL-256953...

unbound security update

1.24.2-23 - Prevent heap corruption during CNAME synthesis CVE-2026-82717 1.24.2-22 - Prevent heap buffer overflow during DNSSEC canonicalization CVE-2026-81634 1.24.2-21 - Prevent heap buffer overflow when digesting DNSKEY CVE-2026-81642 - Add unit test for the vulnerability too...